CVE-2003-1200
Alt-N MDaemon 6.5.2-6.8.5 - Stack-Based Buffer Overflow via Long From Parameter
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2003-1200.
PoCs published by Metasploit, Rosiello Security, Behrang Fouladi, including Metasploit module exploits/windows/http/mdaemon_worldclient_form2raw.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in Alt-N MDaemon SMTP server (versions <= 6.8.5) via the WorldClient form2raw.cgi script. It leverages an excessively long 'From' field to trigger the vulnerability, delivering a payload that executes when the Raw Queue is processed.
Description
Stack-based buffer overflow in FORM2RAW.exe in Alt-N MDaemon 6.5.2 through 6.8.5 allows remote attackers to execute arbitrary code via a long From parameter to Form2Raw.cgi.
Exploits (4)
This exploit targets a stack buffer overflow in Alt-N MDaemon SMTP server (versions <= 6.8.5) via the WorldClient form2raw.cgi script. It leverages an excessively long 'From' field to trigger the vulnerability, delivering a payload that executes when the Raw Queue is processed.
This exploit targets a buffer overflow vulnerability in MDaemon/WorldClient mail server by sending a crafted HTTP request with an oversized 'From' field. It includes shellcode to bind a shell on port 58821 and is designed for specific Windows XP targets.
This exploit targets a buffer overflow vulnerability in MDaemon/WorldClient mail server by sending a maliciously crafted HTTP request with an oversized 'From' field. The PoC overwrites EIP and attempts to execute arbitrary code, though the shellcode/payload is not included in this snippet.
This Metasploit module exploits a stack buffer overflow in Alt-N MDaemon SMTP server (versions 6.8.5 and earlier) via the WorldClient form2raw.cgi script. The exploit triggers a buffer overflow by sending an excessively long 'From' field, leading to arbitrary code execution when the Raw Queue is processed.