CVE-1999-0920
University of Washington IMAP - Buffer Overflow via POP-2D FOLD Command
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-1999-0920.
PoCs published by Chris Evans, aushack, including Metasploit module auxiliary/admin/pop2/uw_fileretrieval.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in pop2d version 4.4 or earlier, allowing remote attackers to execute arbitrary code as the 'nobody' user via a crafted FOLD command. The exploit includes shellcode to spawn a shell and is designed to be used in conjunction with an IMAP server.
Description
Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command.
Exploits (2)
This exploit targets a buffer overflow vulnerability in pop2d version 4.4 or earlier, allowing remote attackers to execute arbitrary code as the 'nobody' user via a crafted FOLD command. The exploit includes shellcode to spawn a shell and is designed to be used in conjunction with an IMAP server.
This Metasploit module exploits a vulnerability in the University of Washington ipop2d service (CVE-1999-0920) by abusing the FOLD command to retrieve arbitrary files readable by the POP account's user ID. It requires valid credentials and interacts with the POP2 protocol to fetch file contents.