CVE-2006-0925

Alt-N MDaemon 8.1.1 - Denial of Service via IMAP4rev1 Folder Name Format String

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-0925. PoCs published by Nemesis.

AI-analyzed exploit summary This exploit demonstrates a format-string vulnerability in Alt-N MDaemon IMAP Server. The PoC sends malformed CREATE and LIST commands with excessive format specifiers to trigger the vulnerability, potentially leading to a denial-of-service or remote code execution.

Description

Format string vulnerability in the IMAP4rev1 server in Alt-N MDaemon 8.1.1 and possibly 8.1.4 allows remote attackers to cause a denial of service (CPU consumption) by creating and then listing folders whose names contain format string specifiers.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Nemesis · textdoswindows

https://www.exploit-db.com/exploits/27329

View Code ZIP pw:eip

This exploit demonstrates a format-string vulnerability in Alt-N MDaemon IMAP Server. The PoC sends malformed CREATE and LIST commands with excessive format specifiers to trigger the vulnerability, potentially leading to a denial-of-service or remote code execution.

Classification

Working Poc 90%

Attack Type

Dos

Complexity

Trivial

Reliability

Reliable

Target: Alt-N MDaemon IMAP Server 8.1.1

Auth required

Prerequisites: Network access to the IMAP service · Valid credentials for authentication

MITRE ATT&CK