CVE-2003-0266 Multiple buffer overflows in SLWebMail 3 on Windows systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long Language parameter to showlogin.dll,...
HighCVSS 7.5
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in SLWebMail 3 on Windows systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long Language parameter to showlogin.dll, (2) a long CompanyID parameter to recman.dll, (3) a long CompanyID parameter to admin.dll, or (4) a long CompanyID parameter to globallogin.dll.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bvrp software slwebmail | = 3.0 | No fix listed |
References
- 20030507 Multiple Vulnerabilities in SLWebmail mailing-list
- 20030507 Multiple Vulnerabilities in SLWebmail mailing-list
- www.nextgenss.com vendor-advisory