CVE-2004-2513
Mercury (Pegasus) Mail 4.01 - Remote Code Execution via IMAP SELECT Command
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2004-2513. PoCs published by Heretic2, JohnH, Reed Arvin.
AI-analyzed exploit summary This exploit targets a pre-authentication EIP overwrite vulnerability in Mercury/32 SMTP Server versions 3.32 to 4.51. It includes shellcode for a bind shell on port 4444 and uses a variety of return addresses for different Windows versions.
Description
Buffer overflow in the IMAP service of Mercury (Pegasus) Mail 4.01 allows remote attackers to execute arbitrary code via a long SELECT command.
Exploits (5)
This exploit targets a pre-authentication EIP overwrite vulnerability in Mercury/32 SMTP Server versions 3.32 to 4.51. It includes shellcode for a bind shell on port 4444 and uses a variety of return addresses for different Windows versions.
This exploit targets a buffer overflow vulnerability in Mercury32 IMAP server, allowing remote code execution via a crafted IMAP command. It includes shellcode for a bind shell on port 1981 and supports 14 different IMAP commands for exploitation.
This exploit targets a buffer overflow vulnerability in Mercury/32 IMAP4 service by sending an overly long CHECK command. It attempts to crash the service, leading to a denial of service (DoS).
This exploit targets a buffer overflow vulnerability in Mercury32 IMAP server. It sends a crafted SELECT command with a long string of 'A's followed by a return address and shellcode to achieve remote code execution.
This is a functional exploit for a stack-based buffer overflow in Mercury Mail 4.01 (Pegasus) IMAP server. It leverages a vulnerable SELECT command to execute arbitrary shellcode (calc.exe) via a crafted buffer with a specific return address.