CVE-2001-1009
fetchmail < 5.8.17 - Memory Corruption via Negative LIST Response Index
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2001-1009. PoCs published by Salvatore Sanfilippo -antirez-, Sanfillipo antirez.
AI-analyzed exploit summary This exploit targets a signed integer overflow vulnerability in Fetchmail 5.8.15, allowing arbitrary memory writes via a maliciously crafted POP3 response. The PoC includes shellcode to execute '/bin/ls' and demonstrates the vulnerability by overwriting critical memory addresses.
Description
Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request.
Exploits (2)
This exploit targets a signed integer overflow vulnerability in Fetchmail 5.8.15, allowing arbitrary memory writes via a maliciously crafted POP3 response. The PoC includes shellcode to execute '/bin/ls' and demonstrates the vulnerability by overwriting critical memory addresses.
This exploit targets a signed integer overflow vulnerability in Fetchmail 5.8.15, allowing arbitrary code execution via a crafted POP3 response. The PoC overwrites memory by manipulating array indices, leading to shellcode execution.