CVE-2000-0284
University of Washington imapd 4.7 - Authenticated Buffer Overflow via LIST Command
Title source: llmExploitation Summary
EIP tracks 9 public exploits for CVE-2000-0284.
PoCs published by Metasploit, Gabriel A. Maggiotti, Teso, including Metasploit module exploits/linux/imap/imap_uw_lsub.
AI-analyzed exploit summary This is a Metasploit module exploiting a buffer overflow in the University of Washington IMAP server's LSUB command. It requires valid credentials and targets Linux systems with a brute-force approach to bypass ASLR.
Description
Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands.
Exploits (9)
This is a Metasploit module exploiting a buffer overflow in the University of Washington IMAP server's LSUB command. It requires valid credentials and targets Linux systems with a brute-force approach to bypass ASLR.
This exploit targets a buffer overflow in the LIST command of imapd (IMAP4rev1 prior to v10.234) on Redhat 7.0. It crafts a malicious payload to execute arbitrary shellcode, providing a reverse shell on port 30464.
This exploit targets a buffer overflow vulnerability in WU-IMAP 2000.287(1-2) by sending a crafted PARTIAL command with shellcode to achieve remote code execution. It includes a reverse shell payload and requires valid login credentials.
This exploit targets a buffer overflow vulnerability in IMAP4rev1 (CVE-2000-0284) by sending a maliciously crafted LSUB command with embedded shellcode to achieve remote code execution. It supports multiple versions and distributions by adjusting the return address.
This exploit targets a buffer overflow vulnerability in IMAP4rev1 v10.190. It uses a crafted AUTHENTICATE command with a long buffer containing NOP sleds, shellcode, and a manipulated return address to achieve remote code execution.
This exploit targets a buffer overflow in the University of Washington IMAP4 server's LSUB command, allowing remote code execution. It includes bruteforce techniques for stack and heap overflows across multiple architectures (x86, SPARC) and operating systems (Linux, FreeBSD, NetBSD, OpenBSD).
This is a Metasploit module exploiting a buffer overflow in the University of Washington IMAP4 server's COPY command. It includes stack bruteforce techniques for multiple architectures (x86, SPARC) and operating systems (Linux, BSD variants).
This exploit targets a buffer overflow in the 'LSUB' command of the University of Washington IMAP server (v12.264). It sends a crafted payload to achieve remote code execution on vulnerable systems.
This Metasploit module exploits a buffer overflow in the LSUB command of the University of Washington IMAP server (v12.264) to achieve remote code execution. It requires valid credentials and uses a brute-force approach to bypass ASLR.