CVE-2004-1558
YPOPs! 0.4-0.6 - Stack-Based Buffer Overflow via Long POP3 USER Command or SMTP Request
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2004-1558.
PoCs published by Metasploit, Diabolic Crab, class101, including Metasploit module exploits/windows/smtp/ypops_overflow1.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack buffer overflow in YPOPS 0.6 POP3 service. It targets multiple Windows versions by overwriting EIP with a 'jmp ebx' instruction in ws_32.dll.
Description
Multiple stack-based buffer overflows in YPOPs! (aka YahooPOPS) 0.4 through 0.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) POP3 USER command or (2) SMTP request.
Exploits (4)
This is a Metasploit module exploiting a stack buffer overflow in YPOPS 0.6 POP3 service. It targets multiple Windows versions by overwriting EIP with a 'jmp ebx' instruction in ws_32.dll.
This exploit targets a buffer overflow vulnerability in YahooPOPs <= 1.6 SMTP server. It sends a crafted payload containing shellcode to bind a shell on port 101, followed by a JMP ESP instruction and a JMP EBX instruction to redirect execution flow.
This exploit targets a buffer overflow vulnerability in YahooPOPS v1.6 and prior via the SMTP port. It constructs a payload with NOP sleds, shellcode, and a JMP ESP instruction to execute a bind shell on port 101.
This Metasploit module exploits a stack buffer overflow in YPOPS 0.6 by sending a crafted payload to the POP3 service, targeting multiple Windows versions. It leverages a 'jmp ebx' instruction in ws_32.dll to achieve remote code execution.