CVE-2002-0280

CodeBlue < 4 - Remote Code Execution via SMTP Reply Buffer Overflow

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2002-0280. PoCs published by doe.

AI-analyzed exploit summary This exploit targets a buffer overflow in CodeBlue's SMTP response handling. It sets up a fake SMTP server to deliver a crafted response containing shellcode, triggering remote code execution when CodeBlue processes the log entry.

Description

Buffer overflow in CodeBlue 4 and earlier, and possibly other versions, allows remote attackers to execute arbitrary code via a long string in an SMTP reply.

Exploits (1)

exploitdb WORKING POC VERIFIED

by doe · cremotewindows

https://www.exploit-db.com/exploits/21643

View Code ZIP pw:eip

This exploit targets a buffer overflow in CodeBlue's SMTP response handling. It sets up a fake SMTP server to deliver a crafted response containing shellcode, triggering remote code execution when CodeBlue processes the log entry.

Classification

Working Poc 80%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: CodeBlue (Apache log scanning utility)

No auth needed

Prerequisites: CodeBlue running on a vulnerable system · Ability to inject a log entry into the target's Apache logs · Network access to the target's SMTP port

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 16, 2026 Full analysis →