{"id":"CVE-2003-0264","aliases":["EUVD-2003-0259","GHSA-5mc6-vfr3-gfp6"],"status":"published","title":"Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code...","description":"Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe, (2) a long XTRN argument to slmail.exe, (3) a long string to POPPASSWD, or (4) a long password to the POP3 server.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.71921,"percentile":0.9943,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2003-05-08T04:00:00Z","modified":"2026-06-16T22:01:52Z","exploits":[{"source":"exploitdb","id":"EDB-16399","title":"Seattle Lab Mail (SLmail) 5.5 - POP3 'PASS' Remote Buffer Overflow (Metasploit)","type":"remote","platform":"windows","date":"2010-04-30","verified":true,"url":"https://www.exploit-db.com/exploits/16399"},{"source":"exploitdb","id":"EDB-638","title":"Seattle Lab Mail (SLmail) 5.5 - POP3 'PASS' Remote Buffer Overflow (1)","type":"remote","platform":"windows","date":"2004-11-18","verified":true,"url":"https://www.exploit-db.com/exploits/638"},{"source":"exploitdb","id":"EDB-643","title":"Seattle Lab Mail (SLmail) 5.5 - POP3 'PASS' Remote Buffer Overflow (2)","type":"remote","platform":"windows","date":"2004-12-21","verified":true,"url":"https://www.exploit-db.com/exploits/643"},{"source":"exploitdb","id":"EDB-646","title":"Seattle Lab Mail (SLmail) 5.5 - POP3 'PASS' Remote Buffer Overflow (3)","type":"remote","platform":"windows","date":"2004-12-22","verified":true,"url":"https://www.exploit-db.com/exploits/646"},{"source":"metasploit","id":"exploit/windows/pop3/seattlelab_pass","title":"Seattle Lab Mail 5.5 POP3 Buffer Overflow","type":"exploit","platform":"Windows","date":"2003-05-07","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/pop3/seattlelab_pass"},{"source":"pocgithub","id":"TheMalwareGuardian/CVE-2003-0264","title":"TheMalwareGuardian/CVE-2003-0264","date":"2026-03-19","url":"https://github.com/TheMalwareGuardian/CVE-2003-0264"},{"source":"pocgithub","id":"adenkiewicz/CVE-2003-0264","title":"adenkiewicz/CVE-2003-0264","date":"2018-01-01","url":"https://github.com/adenkiewicz/CVE-2003-0264"},{"source":"pocgithub","id":"fyoderxx/slmail-exploit","title":"fyoderxx/slmail-exploit","date":"2018-09-16","url":"https://github.com/fyoderxx/slmail-exploit"},{"source":"pocgithub","id":"nobodyatall648/CVE-2003-0264","title":"nobodyatall648/CVE-2003-0264","date":"2021-05-01","url":"https://github.com/nobodyatall648/CVE-2003-0264"},{"source":"pocgithub","id":"pwncone/CVE-2003-0264-SLmail-5.5","title":"pwncone/CVE-2003-0264-SLmail-5.5","date":"2020-03-13","url":"https://github.com/pwncone/CVE-2003-0264-SLmail-5.5"},{"source":"pocgithub","id":"vrikodar/CVE-2003-0264_EXPLOIT","title":"vrikodar/CVE-2003-0264_EXPLOIT","date":"2021-04-08","url":"https://github.com/vrikodar/CVE-2003-0264_EXPLOIT"},{"source":"pocgithub","id":"war4uthor/CVE-2003-0264","title":"war4uthor/CVE-2003-0264","date":"2018-12-19","url":"https://github.com/war4uthor/CVE-2003-0264"}],"products":[{"vendor":"seattle_lab_software","product":"slmail"}],"references":[{"url":"http://marc.info/?l=bugtraq\u0026m=105232506011335\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://marc.info/?l=ntbugtraq\u0026m=105233360321895\u0026w=2","tags":["mailing-list","x_refsource_NTBUGTRAQ","x_transferred"]},{"url":"http://www.nextgenss.com/advisories/slmail-vulns.txt","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/161526/SLMail-5.1.0.4420-Remote-Code-Execution.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2003-0264"},{"url":"https://github.com/advisories/GHSA-5mc6-vfr3-gfp6"}],"sources":{"cve":[{"id":"CVE-2003-0264","description":"Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe, (2) a long XTRN argument to slmail.exe, (3) a long string to POPPASSWD, or (4) a long password to the POP3 server.","status":"published","published":"2003-05-08T04:00:00Z","modified":"2024-08-08T01:50:47.001Z","updated_at":"2026-11-02T14:20:16.411288Z"}],"euvd":[{"id":"EUVD-2003-0259","description":"Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe, (2) a long XTRN argument to slmail.exe, (3) a long string to POPPASSWD, or (4) a long password to the POP3 server.","status":"published","published":"2003-05-08T04:00:00Z","modified":"2024-08-08T01:50:47Z","updated_at":"2026-11-03T01:15:08.178994Z"}],"ghsa":[{"id":"GHSA-5mc6-vfr3-gfp6","title":"Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code...","description":"Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe, (2) a long XTRN argument to slmail.exe, (3) a long string to POPPASSWD, or (4) a long password to the POP3 server.","status":"published","published":"2022-04-29T01:26:07Z","modified":"2023-01-30T05:01:05Z","updated_at":"2026-11-02T14:46:20.153222Z"}],"nvd":[{"id":"CVE-2003-0264","description":"Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe, (2) a long XTRN argument to slmail.exe, (3) a long string to POPPASSWD, or (4) a long password to the POP3 server.","status":"published","published":"2003-05-27T04:00:00Z","modified":"2026-06-16T22:01:52.113Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:46.710758Z"}]}}