CVE-2005-2472
BusinessMail 4.60.00 - Denial of Service via Long SMTP HELO or MAIL FROM Command
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-2472. PoCs published by Kozan, Reed Arvin.
AI-analyzed exploit summary This exploit targets a denial-of-service vulnerability in BusinessMail Server 4.60.00 by sending malformed HELO and MAIL FROM commands with an excessively long buffer of 'A' characters. The exploit establishes a TCP connection to port 25 and triggers the crash by overflowing the buffer.
Description
Multiple buffer overflows in BusinessMail 4.60.00 allow remote attackers to cause a denial of service (application crash) via a long string to SMTP (1) HELO or (2) MAIL FROM commands.
Exploits (2)
This exploit targets a denial-of-service vulnerability in BusinessMail Server 4.60.00 by sending malformed HELO and MAIL FROM commands with an excessively long buffer of 'A' characters. The exploit establishes a TCP connection to port 25 and triggers the crash by overflowing the buffer.
This exploit targets a denial-of-service (DoS) vulnerability in BusinessMail email server system 4.60.00 by sending oversized HELO and MAIL FROM commands to the SMTP service on port 25. The excessive input length (512 'A' characters) triggers a crash or instability in the server.