CVE-2003-0487

This exploit targets a buffer overflow vulnerability in Kerio MailServer 5.6.3 via a crafted HTTP request with a malicious 'folder' parameter. It appends a root user to /etc/passwd, allowing privilege escalation to UID 0.

This exploit demonstrates a buffer overflow vulnerability in Kerio MailServer's webmail component by sending an excessively long username via the 'showuser' parameter. The lack of bounds checking may allow arbitrary code execution with the privileges of the Kerio MailServer process.

This exploit targets a buffer overflow vulnerability in Kerio MailServer's webmail component by sending an excessively long username in the 'folder' parameter. Successful exploitation could lead to arbitrary code execution with the privileges of the Kerio MailServer process.

This exploit demonstrates a buffer overflow vulnerability in Kerio MailServer's webmail component by sending an excessively long 'user' parameter in a URL request. The lack of bounds checking may allow arbitrary code execution with the privileges of the MailServer process.

This exploit demonstrates a buffer overflow vulnerability in Kerio MailServer's webmail component by sending an excessively long username in the 'folder' parameter. The lack of bounds checking may allow arbitrary code execution with the privileges of the Kerio MailServer process.