CVE-2003-0264 PoC — SLMail安全漏洞

Source

https://github.com/pwncone/CVE-2003-0264-SLmail-5.5

Associated Vulnerability

Title: SLMail安全漏洞 (CVE-2003-0264)
Description:Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe, (2) a long XTRN argument to slmail.exe, (3) a long string to POPPASSWD, or (4) a long password to the POP3 server.

Description

A POC remote buffer overflow for CVE-2003-0264 - SLMail 5.5

Readme

# CVE-2003-0264 - Seattle Lab Mail 5.5 POP3 Buffer Overflow

## References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0264

## Vulnerability
SLMail has no bounds checking when submitting a POP3 password.
As a result, you can execute arbitrary code by submitting a long, malformed POP3 PASS to the SLMail server.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →