CVE-2004-0297
Ipswitch IMail - Buffer Overflow via LDAP Message with Large Tag Length
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2004-0297.
PoCs published by Metasploit, Johnny Cyberpunk, hdm, including Metasploit module exploits/windows/ldap/imail_thc.
AI-analyzed exploit summary This is a Metasploit module exploiting a buffer overflow in the IMail LDAP service (CVE-2004-0297). It crafts a malicious LDAP packet with a long string of NOP sleds and a payload to achieve remote code execution on vulnerable Windows 2000 systems.
Description
Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Server 8.03 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via an LDAP message with a large tag length.
Exploits (3)
This is a Metasploit module exploiting a buffer overflow in the IMail LDAP service (CVE-2004-0297). It crafts a malicious LDAP packet with a long string of NOP sleds and a payload to achieve remote code execution on vulnerable Windows 2000 systems.
This exploit targets a buffer overflow vulnerability in Imail LDAP service (CVE-2004-0297) to achieve remote code execution. It crafts a malicious LDAP packet with shellcode and connects to the target on port 389, then attempts to establish a reverse shell on port 31337.
This Metasploit module exploits a buffer overflow in the IMail LDAP service (CVE-2004-0297) by sending a maliciously crafted LDAP request to trigger remote code execution. It targets Windows 2000 systems running IMail versions 7.10 and 8.5.