How severe is CVE-2003-0264?

CVE-2003-0264 has a CVSS 2.0 base score of 7.5, rated high severity.

Is CVE-2003-0264 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 71% (99th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2003-0264?

CVE-2003-0264 affects Seattle Lab Software Slmail. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2003-0264?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2003-0264 published?

CVE-2003-0264 was published on 2003-05-27 and last updated on 2026-06-16.

CVE-2003-0264

CVE-2003-0264 is a high-severity vulnerability in Seattle Lab Software Slmail with a CVSS 2.0 base score of 7.5. Its EPSS exploit-prediction score of 71% places it in the 99th percentile, indicating an elevated likelihood of exploitation.

Key facts

Severity: High (CVSS 2.0 base score 7.5)
EPSS exploit prediction: 71% (99th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Seattle Lab Software Slmail
Published: 2003-05-27
Last modified: 2026-06-16

Description

Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe, (2) a long XTRN argument to slmail.exe, (3) a long string to POPPASSWD, or (4) a long password to the POP3 server.

Frequently asked questions

What is CVE-2003-0264?: Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe, (2) a long XTRN argument to slmail.exe, (3) a long string to POPPASSWD, or (4) a long password to the POP3 server.
How severe is CVE-2003-0264?: CVE-2003-0264 has a CVSS 2.0 base score of 7.5, rated high severity.
Is CVE-2003-0264 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 71% (99th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2003-0264?: CVE-2003-0264 affects Seattle Lab Software Slmail. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2003-0264?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2003-0264 published?: CVE-2003-0264 was published on 2003-05-27 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:seattle_lab_software:slmail:5.1.0.4420:*:*:*:*:*:*:*

More vulnerabilities in Seattle Lab Software Slmail

CVE-1999-0102 — High (CVSS 7.5): Buffer overflow in SLmail 3.x allows attackers to execute commands using a large FROM line.
CVE-1999-0231 — Medium (CVSS 5.0): Buffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of…
CVE-1999-0380 — Medium (CVSS 4.6): SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service…

All CVEs affecting Seattle Lab Software Slmail →