Exploitation Summary
EIP tracks 4 public exploits for CVE-2005-1099.
PoCs published by Metasploit, Xpl017Elz, patrick, including Metasploit module exploits/linux/misc/gld_postfix.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in GLD (Greylisting Daemon) for Postfix by sending an overly long string to overwrite the stack. It targets RedHat Linux 7.0 and achieves remote code execution via a crafted payload.
Description
Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon (GLD) 1.3 and 1.4, when GLD is listening on a network interface, allow remote attackers to execute arbitrary code.
Exploits (4)
This Metasploit module exploits a stack buffer overflow in GLD (Greylisting Daemon) for Postfix by sending an overly long string to overwrite the stack. It targets RedHat Linux 7.0 and achieves remote code execution via a crafted payload.
This exploit targets a buffer overflow and format string vulnerability in GLD 1.4, allowing remote code execution with superuser privileges. It includes multiple exploit methods tailored for different Linux distributions and versions.
This exploit targets a stack-based buffer overflow in GLD (Greylisting Daemon) for Postfix <= 1.4. It sends a maliciously crafted string to overwrite the stack, achieving remote code execution.
This Metasploit module exploits a stack buffer overflow in GLD (Greylisting Daemon) for Postfix by sending an overly long string to overwrite the stack. It targets RedHat Linux 7.0 and delivers a payload to achieve remote code execution.