CVE-2003-0264
CVE-2003-0264
Vexday Risk Score
60Attention
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Functional exploit
Automatable exploit available (Nuclei/Metasploit).
CVSS —EPSS 71.5%KEV nãoPoC públicaNuclei —Metasploit simPatch —
Lifecycle
07 May 2003Metasploit module available
08 May 2003Published on NVD
18 Nov 2004Public PoC
Weaponization speed
560 daysto first PoC
Recommendation: Plan a near-term fix — a public PoC already exists.
Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe, (2) a long XTRN argument to slmail.exe, (3) a long string to POPPASSWD, or (4) a long password to the POP3 server.
Affected products
n/a · n/apublic PoCs found — 12
githubgithub.com/TheMalwareGuardian/CVE-2003-0264★ 0githubgithub.com/adenkiewicz/CVE-2003-0264★ 0githubgithub.com/fyoderxx/slmail-exploit★ 0githubgithub.com/war4uthor/CVE-2003-0264★ 0githubgithub.com/pwncone/CVE-2003-0264-SLmail-5.5★ 0githubgithub.com/vrikodar/CVE-2003-0264_EXPLOIT★ 0githubgithub.com/nobodyatall648/CVE-2003-0264★ 0exploitdbwww.exploit-db.com/exploits/16399unverifiedexploitdbwww.exploit-db.com/exploits/638unverifiedexploitdbwww.exploit-db.com/exploits/643unverifiedexploitdbwww.exploit-db.com/exploits/646unverifiedcve_referencepacketstormsecurity.com/files/161526/SLMail-5.1.0.4420-Remote-Code-Execution.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.