CVE-2001-0679
Trend Micro InterScan VirusWall 3.23 and 3.3 - Remote Code Execution via Long HELO Command
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2001-0679. PoCs published by dark spyrit, Alain Thivillon & Stephane Aubert.
AI-analyzed exploit summary This is a buffer overflow exploit targeting the HELO command in the SMTP gateway of InterScan VirusWall 3.23/3.3. It includes shellcode to achieve remote code execution (RCE) by overflowing the buffer with NOP sleds followed by malicious payload.
Description
A buffer overflow in InterScan VirusWall 3.23 and 3.3 allows a remote attacker to execute arbitrary code by sending a long HELO command to the server.
Exploits (2)
This is a buffer overflow exploit targeting the HELO command in the SMTP gateway of InterScan VirusWall 3.23/3.3. It includes shellcode to achieve remote code execution (RCE) by overflowing the buffer with NOP sleds followed by malicious payload.
This exploit targets a buffer overflow vulnerability in the HELO command of the InterScan SMTP Server (VirusWall) on Windows NT. It sends a crafted HELO command with 4075 'a' characters to trigger a crash or DoS condition.