CVE-1999-0920

This exploit targets a buffer overflow vulnerability in pop2d version 4.4 or earlier, allowing remote attackers to execute arbitrary code as the 'nobody' user via a crafted FOLD command. The exploit includes shellcode to spawn a shell and is designed to be used in conjunction with an IMAP server.

This Metasploit module exploits a vulnerability in the University of Washington ipop2d service (CVE-1999-0920) by abusing the FOLD command to retrieve arbitrary files readable by the POP account's user ID. It requires valid credentials and interacts with the POP2 protocol to fetch file contents.