{"id":"CVE-2004-0309","aliases":["EUVD-2004-0309","GHSA-7r76-xfcg-jhgf"],"status":"published","title":"Stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm...","description":"Stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm before 4.5.538.001, ZoneLabs Integrity client 4.0 before 4.0.146.046, and 4.5 before 4.5.085, allows remote attackers to execute arbitrary code via a long RCPT TO argument.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.08844,"percentile":0.95232,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2004-09-01T04:00:00Z","modified":"2026-06-16T22:05:21Z","products":[{"vendor":"zonelabs","product":"integrity"},{"vendor":"zonelabs","product":"zonealarm"}],"references":[{"url":"http://www.osvdb.org/3991","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://download.zonelabs.com/bin/free/securityAlert/8.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://marc.info/?l=bugtraq\u0026m=107722656827427\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.securityfocus.com/bid/9696","tags":["vdb-entry","x_refsource_BID","x_transferred","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/619982","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/o-084.shtml","tags":["third-party-advisory","government-resource","x_refsource_CIAC","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14991","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-0309"},{"url":"https://github.com/advisories/GHSA-7r76-xfcg-jhgf"}],"sources":{"cve":[{"id":"CVE-2004-0309","description":"Stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm before 4.5.538.001, ZoneLabs Integrity client 4.0 before 4.0.146.046, and 4.5 before 4.5.085, allows remote attackers to execute arbitrary code via a long RCPT TO argument.","status":"published","published":"2004-09-01T04:00:00Z","modified":"2024-08-08T00:17:14.041Z","updated_at":"2026-11-02T14:34:55.098814Z"}],"euvd":[{"id":"EUVD-2004-0309","description":"Stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm before 4.5.538.001, ZoneLabs Integrity client 4.0 before 4.0.146.046, and 4.5 before 4.5.085, allows remote attackers to execute arbitrary code via a long RCPT TO argument.","status":"published","published":"2004-09-01T04:00:00Z","modified":"2024-08-08T00:17:14Z","updated_at":"2026-11-03T01:15:20.041361Z"}],"ghsa":[{"id":"GHSA-7r76-xfcg-jhgf","title":"Stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm...","description":"Stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm before 4.5.538.001, ZoneLabs Integrity client 4.0 before 4.0.146.046, and 4.5 before 4.5.085, allows remote attackers to execute arbitrary code via a long RCPT TO argument.","status":"published","published":"2022-04-29T02:57:30Z","modified":"2023-01-30T05:02:31Z","updated_at":"2026-11-02T14:46:39.405598Z"}],"nvd":[{"id":"CVE-2004-0309","description":"Stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm before 4.5.538.001, ZoneLabs Integrity client 4.0 before 4.0.146.046, and 4.5 before 4.5.085, allows remote attackers to execute arbitrary code via a long RCPT TO argument.","status":"published","published":"2004-11-23T05:00:00Z","modified":"2026-06-16T22:05:21.877Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:51.985436Z"}]}}