PT-2004-1511 · Sl · Slmail Pro

Publicado 2004-03-18 · Atualizado 2017-07-11 · CVE-2004-0357

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SL Mail Pro version 2.0.9

Description The issue concerns stack-based buffer overflows that allow remote attackers to execute arbitrary code. This is achieved through vulnerable components such as user.dll, loadpageadmin.dll, or loadpageuser.dll.

Recommendations For SL Mail Pro version 2.0.9, consider disabling the user.dll, loadpageadmin.dll, and loadpageuser.dll components as a temporary workaround until a patch is available. Restrict access to these components to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2004-0357

Produtos afetados

Slmail Pro

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2004-0357 · Nota de Segurança
• http://securityfocus.com/bid/9808 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=107850432827699&w=2 · Nota
• http://nextgenss.com/advisories/slmailwm.txt · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15399 · Nota
• http://216.26.170.92/Download/webfiles/Patches/SLMPPatch-2.0.14.pdf · Nota