CVE-2003-0264 – Seattle Lab Mail (SLmail) 5.5 - POP3 'PASS' Remote Buffer Overflow

https://notcve.org/view.php?id=CVE-2003-0264

Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe, (2) a long XTRN argument to slmail.exe, (3) a long string to POPPASSWD, or (4) a long password to the POP3 server. Múltiples desbordamientos de búfer en SLMail 5.1.0.4420 permite que atacantes remotos ejecuten código arbitrario mediante (1) un argumento EHLO largo a slmail.exe, (2) un argumento XTRN largo a slmail.exe, (3) una cadena larga para POPPASSWD, o (4) un password largo para el servidor POP3. • https://github.com/mednic/slmail-exploit https://www.exploit-db.com/exploits/638 https://www.exploit-db.com/exploits/643 https://www.exploit-db.com/exploits/646 https://www.exploit-db.com/exploits/16399 https://github.com/nobodyatall648/CVE-2003-0264 https://github.com/war4uthor/CVE-2003-0264 https://github.com/adenkiewicz/CVE-2003-0264 https://github.com/pwncone/CVE-2003-0264-SLmail-5.5 http://marc.info/?l=bugtraq&m=105232506011335&w=2 http://marc.info/ •