CVE-2005-2409
nbsmtp < 0.99 - Remote Code Execution via Format String in Debug Mode
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-2409. PoCs published by CoKi.
AI-analyzed exploit summary This exploit leverages a format string vulnerability in nbSMTP v0.99 to achieve remote code execution. It crafts a malicious buffer with a return address and shellcode, then sets up a fake SMTP server to trigger the vulnerability and spawn a bind shell on port 5074.
Description
Format string vulnerability in util.c in nbsmtp 0.99 and earlier, while running in debug mode, allows remote attackers to execute arbitrary code via format string specifiers that are not properly handled in a syslog call.
Exploits (1)
This exploit leverages a format string vulnerability in nbSMTP v0.99 to achieve remote code execution. It crafts a malicious buffer with a return address and shellcode, then sets up a fake SMTP server to trigger the vulnerability and spawn a bind shell on port 5074.