Hola, a POC exploit has been posted to Bugtraq. I don't have a smail setup to test this against, though. It's attached for your convenience.
Cheers,
Moritz
--
http://unpythonic.net/~jepler/cgi-bin/rottenflesh.cgi
smail-heap-overflow-remote-exploit-poc.c.gz
Description: GNU Zip compressed data
