CVE-2003-0264

Description

Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe, (2) a long XTRN argument to slmail.exe, (3) a long string to POPPASSWD, or (4) a long password to the POP3 server.

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

Metasploit 1 module

Seattle Lab Mail 5.5 POP3 Buffer Overflow
exploit/windows/pop3/seattlelab_pass

Exploit-DB 4

Seattle Lab Mail (SLmail) 5.5 - POP3 'PASS' Remote Buffer Overflow (Metasploit) EDB-16399 · remote · Apr 30, 2010 · verified
Seattle Lab Mail (SLmail) 5.5 - POP3 'PASS' Remote Buffer Overflow (3) EDB-646 · remote · Dec 22, 2004 · verified
Seattle Lab Mail (SLmail) 5.5 - POP3 'PASS' Remote Buffer Overflow (2) EDB-643 · remote · Dec 21, 2004 · verified
Seattle Lab Mail (SLmail) 5.5 - POP3 'PASS' Remote Buffer Overflow (1) EDB-638 · remote · Nov 18, 2004 · verified

GitHub 7 repositories

TheMalwareGuardian/CVE-2003-0264 ★ 1 · Mar 19, 2026

Classic stack-based buffer overflow in SLMail 5.1 showing how early mail servers could be compromised through oversized SMTP and POP3 commands.
nobodyatall648/CVE-2003-0264 ★ 0 · May 1, 2021

CVE-2003-0264 SLMail5.5_RemoteBufferOverflow
vrikodar/CVE-2003-0264_EXPLOIT ★ 0 · Apr 8, 2021

Buffer Overflow in Seattle Lab Mail (SLmail) 5.5 - POP3
pwncone/CVE-2003-0264-SLmail-5.5 ★ 0 · Mar 13, 2020

A POC remote buffer overflow for CVE-2003-0264 - SLMail 5.5
war4uthor/CVE-2003-0264 ★ 0 · Dec 19, 2018

CVE-2003-0264 - SLMail 5.5 POP3 'PASS' Remote Buffer Overflow Vulnerability. Tested on Windows XP Professional SP3.
fyoderxx/slmail-exploit ★ 0 · Sep 16, 2018

Exploit SLmail Buffer Overflow CVE-2003-0264
adenkiewicz/CVE-2003-0264 ★ 0 · Jan 1, 2018

Exploit for CVE-2003-0264 based on pwntools and metasploit's windows/reverse_tcp

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe…