PT-2003-1472 · Slmail · Slmail

David Litchfield + 1 · Publicado 2003-05-08 · Atualizado 2021-02-24 · CVE-2003-0264

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: SLMail version 5.1.0.4420

Description: The issue allows remote attackers to execute arbitrary code due to multiple buffer overflows. This can be achieved through various means, including a long EHLO argument to slmail.exe, a long XTRN argument to slmail.exe, a long string to POPPASSWD, or a long password to the POP3 server.

Recommendations: For SLMail version 5.1.0.4420, consider restricting access to the slmail.exe and POP3 server until a patch is available. As a temporary workaround, limit the length of input arguments and strings to prevent buffer overflows. Avoid using long passwords or strings in the POPPASSWD and POP3 server.

Exploit

Correção

Identificadores relacionados

CVE-2003-0264

Produtos afetados

Slmail

Referências · 10

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/pop3/seattlelab_pass.rb · Exploit
• 🔥 https://exploit-db.com/exploits/638 · Exploit
• 🔥 https://exploit-db.com/exploits/646 · Exploit
• 🔥 https://exploit-db.com/exploits/16399 · Exploit
• 🔥 https://exploit-db.com/exploits/643 · Exploit
• http://marc.info/?l=bugtraq&m=105232506011335&w=2 · Nota
• http://nextgenss.com/advisories/slmail-vulns.txt · Aviso do Fabricante
• http://marc.info/?l=ntbugtraq&m=105233360321895&w=2 · Nota
• http://packetstormsecurity.com/files/161526/SLMail-5.1.0.4420-Remote-Code-Execution.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-0264 · Nota de Segurança