Exploitation Summary
EIP tracks 5 public exploits for CVE-2003-0487. PoCs published by B-r00t, David F.Madrid.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Kerio MailServer 5.6.3 via a crafted HTTP request with a malicious 'folder' parameter. It appends a root user to /etc/passwd, allowing privilege escalation to UID 0.
Description
Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via (1) a long showuser parameter in the do_subscribe module, (2) a long folder parameter in the add_acl module, (3) a long folder parameter in the list module, and (4) a long user parameter in the do_map module.
Exploits (5)
This exploit targets a buffer overflow vulnerability in Kerio MailServer 5.6.3 via a crafted HTTP request with a malicious 'folder' parameter. It appends a root user to /etc/passwd, allowing privilege escalation to UID 0.
This exploit demonstrates a buffer overflow vulnerability in Kerio MailServer's webmail component by sending an excessively long username via the 'showuser' parameter. The lack of bounds checking may allow arbitrary code execution with the privileges of the Kerio MailServer process.
This exploit targets a buffer overflow vulnerability in Kerio MailServer's webmail component by sending an excessively long username in the 'folder' parameter. Successful exploitation could lead to arbitrary code execution with the privileges of the Kerio MailServer process.
This exploit demonstrates a buffer overflow vulnerability in Kerio MailServer's webmail component by sending an excessively long 'user' parameter in a URL request. The lack of bounds checking may allow arbitrary code execution with the privileges of the MailServer process.
This exploit demonstrates a buffer overflow vulnerability in Kerio MailServer's webmail component by sending an excessively long username in the 'folder' parameter. The lack of bounds checking may allow arbitrary code execution with the privileges of the Kerio MailServer process.