CVE-2001-1287
Ipswitch IMail <= 7.04 - Remote Code Execution via Long HTTP GET Request
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2001-1287. PoCs published by Andrew Griffiths.
AI-analyzed exploit summary This exploit demonstrates a timing attack to infer the existence of inaccessible files by measuring the time difference in error responses when attempting to open existent vs. non-existent files. It uses the `open()` system call with specific flags to exploit a weakness in file access timing.
Description
Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
Exploits (1)
This exploit demonstrates a timing attack to infer the existence of inaccessible files by measuring the time difference in error responses when attempting to open existent vs. non-existent files. It uses the `open()` system call with specific flags to exploit a weakness in file access timing.