CVE-2003-0143
qpopper 4.0.x < 4.0.5fc2 - Authenticated Buffer Overflow via Long Macro Name in mdef Command
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2003-0143. PoCs published by Florian Heinz.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Qpopper 4.0.4 and earlier via the 'mdef' command, allowing remote code execution. It uses a brute-force approach to determine the correct buffer size and return address for successful exploitation.
Description
The pop_msg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer after a call to Qvsnprintf, which could allow authenticated users to execute arbitrary code via a buffer overflow in a mdef command with a long macro name.
Exploits (1)
This exploit targets a buffer overflow vulnerability in Qpopper 4.0.4 and earlier via the 'mdef' command, allowing remote code execution. It uses a brute-force approach to determine the correct buffer size and return address for successful exploitation.