PT-2004-1511 · Sl · Slmail Pro

Published 2004-03-18 · Updated 2017-07-11 · CVE-2004-0357

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SL Mail Pro version 2.0.9

Description The issue concerns stack-based buffer overflows that allow remote attackers to execute arbitrary code. This is achieved through vulnerable components such as user.dll, loadpageadmin.dll, or loadpageuser.dll.

Recommendations For SL Mail Pro version 2.0.9, consider disabling the user.dll, loadpageadmin.dll, and loadpageuser.dll components as a temporary workaround until a patch is available. Restrict access to these components to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2004-0357

Affected Products

Slmail Pro

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2004-0357 · Security Note
• http://securityfocus.com/bid/9808 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=107850432827699&w=2 · Note
• http://nextgenss.com/advisories/slmailwm.txt · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15399 · Note
• http://216.26.170.92/Download/webfiles/Patches/SLMPPatch-2.0.14.pdf · Note