CVE-2005-0892
smail 3.2.0.120 - Buffer Overflow via SMTP MAIL FROM Command
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-0892. PoCs published by infamous41md, infamous42md.
AI-analyzed exploit summary This exploit targets a heap-based buffer overflow in smail's preparse_address_1() function, allowing remote code execution via a crafted SMTP command. It includes shellcode for a reverse shell and demonstrates the vulnerability with detailed comments on alignment and heap manipulation challenges.
Description
Buffer overflow in smail 3.2.0.120 allows remote attackers or local users to execute arbitrary code via a long string in the MAIL FROM command and possibly other SMTP commands.
Exploits (2)
This exploit targets a heap-based buffer overflow in smail's preparse_address_1() function, allowing remote code execution via a crafted SMTP command. It includes shellcode for a reverse shell and demonstrates the vulnerability with detailed comments on alignment and heap manipulation challenges.
This exploit targets a heap overflow vulnerability in Smail-3's preparse_address_1() function, allowing remote code execution with superuser privileges. It uses a crafted SMTP command to overflow the heap and redirect execution to shellcode.