Unscored severity · published Nov 23, 2004
CVE-2004-0309
Stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm before 4.5.538.001, ZoneLabs Integrity client 4.0 before 4.0.146.046, and 4.5 before…
–
CVSS
8.8%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm before 4.5.538.001, ZoneLabs Integrity client 4.0 before 4.0.146.046, and 4.5 before 4.5.085, allows remote attackers to execute arbitrary code via a long RCPT TO argument.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.8% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IN
Integrity · Zonelabs
4.0 · source: NVD
ZO
Zonealarm · Zonelabs
4.0; 4.0; 4.0; 4.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0309
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0309
download.zonelabs.com
http://download.zonelabs.com/bin/free/securityAlert/8.html
marc.info
http://marc.info/?l=bugtraq&m=107722656827427&w=2
www.ciac.org
http://www.ciac.org/ciac/bulletins/o-084.shtml
Third Party Advisory
http://www.kb.cert.org/vuls/id/619982
www.osvdb.org
http://www.osvdb.org/3991
Vendor Advisory
http://www.securityfocus.com/bid/9696