CVE-2003-1200 Stack-based buffer overflow in FORM2RAW.exe in Alt-N MDaemon 6.5.2 through 6.8.5 allows remote attackers to execute arbitrary code via a long From parameter to Form2Raw.cgi.
HighCVSS 7.5
EPSS 65.1%
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in FORM2RAW.exe in Alt-N MDaemon 6.5.2 through 6.8.5 allows remote attackers to execute arbitrary code via a long From parameter to Form2Raw.cgi.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alt-n mdaemon | = 6.5.2 | No fix listed |
| alt-n mdaemon | = 6.7.5 | No fix listed |
| alt-n mdaemon | = 6.7.9 | No fix listed |
| alt-n mdaemon | = 6.8.0 | No fix listed |
| alt-n mdaemon | = 6.8.1 | No fix listed |
| alt-n mdaemon | = 6.8.2 | No fix listed |
| alt-n mdaemon | = 6.8.3 | No fix listed |
| alt-n mdaemon | = 6.8.4 | No fix listed |
| alt-n mdaemon | = 6.8.5 | No fix listed |
References
- hat-squad.com
- 20040314 Rosiello Security's exploit for MDaemon mailing-list
- 10512 third-party-advisory vendor-advisory
- 3255 exploit vdb-entry vendor-advisory
- 20031229 [Hat-Squad] Remote buffer overflow in Mdaemon Raw message Handler exploit mailing-list vendor-advisory
- 9317 exploit vdb-entry vendor-advisory
- mdaemon-form2raw-from-bo(14097) vdb-entry