PT-2003-1488 · Unknown · Cmailserver

Dennis Rand · Publicado 2003-05-14 · Atualizado 2017-07-11 · CVE-2003-0280

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: CMailServer version 4.0.2003.03.27

Description: The issue concerns multiple buffer overflows in the SMTP Service for ESMTP, allowing remote attackers to execute arbitrary code. This can be achieved by sending long commands, specifically the MAIL FROM or RCPT TO commands.

Recommendations: For CMailServer version 4.0.2003.03.27, consider restricting the length of MAIL FROM and RCPT TO commands to prevent buffer overflows until a patch is available. Additionally, limiting access to the SMTP Service can help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Identificadores relacionados

CVE-2003-0280

Produtos afetados

Cmailserver

Referências · 8

• 🔥 https://exploit-db.com/exploits/22581 · Exploit
• 🔥 https://exploit-db.com/exploits/22582 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11975 · Nota
• http://securityfocus.com/bid/7547 · Nota
• http://marc.info/?l=bugtraq&m=105258772101349&w=2 · Nota
• http://securityfocus.com/bid/7548 · Nota
• http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0062.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-0280 · Nota de Segurança