CVE-2000-0343
Sniffit 0.3.x - Remote Code Execution via Long MAIL FROM Header
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2000-0343. PoCs published by g463, MaXX, FuSyS.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Sniffit 0.3.7.beta's mail logging functionality. It crafts a malicious SMTP 'mail from:' command to overflow a buffer, redirect execution to a port-binding shellcode (port 10000), and achieve remote code execution as root.
Description
Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FROM mail header.
Exploits (3)
This exploit targets a buffer overflow vulnerability in Sniffit 0.3.7.beta's mail logging functionality. It crafts a malicious SMTP 'mail from:' command to overflow a buffer, redirect execution to a port-binding shellcode (port 10000), and achieve remote code execution as root.
This exploit targets a buffer overflow vulnerability in Sniffit 0.3.7.beta's email logging mechanism. It crafts a malicious packet to overflow the stack and execute shellcode that adds a root user to /etc/passwd.
This exploit targets a buffer overflow vulnerability in Sniffit 0.3.7beta's email logging mechanism, allowing remote code execution as root. It uses a modified shellcode to bypass input filters and overwrites the return address to execute arbitrary code.