Exploitation Summary
EIP tracks 12 public exploits for CVE-2003-0264.
PoCs published by Metasploit, Ivan Ivanovic, Haroon Rashid Astwat, including Metasploit module exploits/windows/pop3/seattlelab_pass.
AI-analyzed exploit summary This is a Metasploit module exploiting a buffer overflow in Seattle Lab Mail 5.5 POP3 server via an excessively long password. It achieves remote code execution by overwriting the return address with a 'jmp esp' instruction and includes stack adjustment for reliable exploitation.
Description
Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe, (2) a long XTRN argument to slmail.exe, (3) a long string to POPPASSWD, or (4) a long password to the POP3 server.
Exploits (12)
This is a Metasploit module exploiting a buffer overflow in Seattle Lab Mail 5.5 POP3 server via an excessively long password. It achieves remote code execution by overwriting the return address with a 'jmp esp' instruction and includes stack adjustment for reliable exploitation.
This exploit targets a buffer overflow vulnerability in SLMail's POP3 PASS command. It sends a crafted payload with a NOP sled and shellcode to achieve remote code execution, binding a shell to port 4444.
This exploit targets a buffer overflow vulnerability in SLMail's POP3 PASS command. It sends a crafted payload with a reverse shell shellcode to achieve remote code execution on the target system.
This exploit targets a buffer overflow in SLmail 5.5 POP3 server via the PASS command. It sends a crafted payload with shellcode to achieve remote code execution, spawning a reverse shell on port 4444.
This repository contains a functional exploit for CVE-2003-0264, a stack-based buffer overflow in SLMail 5.5's POP3 PASS command handler. It includes step-by-step exploitation scripts (fuzzing, EIP control, bad character analysis, JMP ESP gadget location, and shellcode execution) and detailed technical documentation.
This repository contains a functional exploit for CVE-2003-0264, a buffer overflow vulnerability in SLMail 5.5's POP3 service. The PoC sends a crafted PASS command with a payload that includes a bind shell, demonstrating remote code execution.
This repository contains a functional exploit for CVE-2003-0264, a stack-based buffer overflow in Seattle Lab Mail (SLmail) 5.5 POP3 service. The exploit includes step-by-step PoC scripts for fuzzing, crash replication, offset calculation, EIP control, bad character identification, and shellcode execution.
This repository contains a functional exploit for CVE-2003-0264, targeting a buffer overflow in SLMail 5.5's POP3 service. The exploit sends a malformed PASS command with a crafted payload to achieve remote code execution via a JMP ESP instruction.
This repository contains a functional exploit for CVE-2003-0264, a buffer overflow vulnerability in SLmail POP3 server. The exploit includes a fuzzer and a full exploit with shellcode to achieve remote code execution.
This repository contains a functional exploit for CVE-2003-0264, targeting a buffer overflow vulnerability in SLmail 5.5. The exploit sends a crafted PASS command with a malicious payload to achieve remote code execution.
This repository contains a functional exploit for CVE-2003-0264, a buffer overflow vulnerability in SLmail 5.5. The exploit uses a reverse TCP shell payload to achieve remote code execution on the target system.
This Metasploit module exploits an unauthenticated buffer overflow in Seattle Lab Mail 5.5 POP3 server via an excessively long password. It uses a 'jmp esp' return address from SLMFC.DLL to achieve remote code execution.