PT-2003-1488 · Unknown · Cmailserver

Dennis Rand · Published 2003-05-14 · Updated 2017-07-11 · CVE-2003-0280

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: CMailServer version 4.0.2003.03.27

Description: The issue concerns multiple buffer overflows in the SMTP Service for ESMTP, allowing remote attackers to execute arbitrary code. This can be achieved by sending long commands, specifically the MAIL FROM or RCPT TO commands.

Recommendations: For CMailServer version 4.0.2003.03.27, consider restricting the length of MAIL FROM and RCPT TO commands to prevent buffer overflows until a patch is available. Additionally, limiting access to the SMTP Service can help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2003-0280

Affected Products

Cmailserver

References · 8

• 🔥 https://exploit-db.com/exploits/22581 · Exploit
• 🔥 https://exploit-db.com/exploits/22582 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0280 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11975 · Note
• http://securityfocus.com/bid/7547 · Note
• http://marc.info/?l=bugtraq&m=105258772101349&w=2 · Note
• http://securityfocus.com/bid/7548 · Note
• http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0062.html · Note