CVE-1999-0822
Qpopper 3.0 - Unauthenticated Buffer Overflow via AUTH Command
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-1999-0822. PoCs published by Synnergy Networks, Mixter.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Qualcomm QPOP 3.0b<=20 by sending a crafted AUTH command with NOP sleds, shellcode, and a manipulated return address to achieve remote code execution. The shellcode spawns a /bin/sh shell, and the exploit is designed to be piped into netcat for delivery.
Description
Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command.
Exploits (2)
This exploit targets a buffer overflow vulnerability in Qualcomm QPOP 3.0b<=20 by sending a crafted AUTH command with NOP sleds, shellcode, and a manipulated return address to achieve remote code execution. The shellcode spawns a /bin/sh shell, and the exploit is designed to be piped into netcat for delivery.
This exploit targets a buffer overflow vulnerability in Qpopper 3.0b (CVE-1999-0822) by sending a crafted AUTH command with NOP sleds and shellcode to achieve remote code execution as root. The exploit is designed for x86 Linux systems and includes a return address override to redirect execution to the shellcode.