CVE-2008-1690 WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code vi...
HighCVSS 10.0
EPSS 5.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a long URI in HTTP requests to TCP port 801. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| seattle lab software slmail pro | <= 6.3.1.0 | No fix listed |
References
- aluigi.org
- 29614 third-party-advisory vendor-advisory
- 28505 vdb-entry
- ADV-2008-1039 vdb-entry
- slmailpro-webcontainer-code-execution(41531) vdb-entry