Exploitation Summary
EIP tracks 2 public exploits for CVE-2003-0280. PoCs published by Dennis Rand.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in CMailServer's SMTP service by sending an overly long MAIL FROM header, causing a denial of service (DoS) and potentially allowing code execution as SYSTEM. The PoC uses a Perl script to connect to the SMTP service and send the malicious payload.
Description
Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long (1) MAIL FROM or (2) RCPT TO commands.
Exploits (2)
This exploit targets a buffer overflow vulnerability in CMailServer's SMTP service by sending an overly long MAIL FROM header, causing a denial of service (DoS) and potentially allowing code execution as SYSTEM. The PoC uses a Perl script to connect to the SMTP service and send the malicious payload.
This exploit targets a buffer overflow vulnerability in CMailServer's SMTP service by sending an overly long RCPT TO header, causing a denial of service (DoS). The PoC demonstrates the crash but does not include the full payload for code execution.