Exploitation Summary
EIP tracks 8 public exploits for CVE-2006-1255.
PoCs published by Metasploit, muts, Jacopo Cervini, including Metasploit module exploits/windows/imap/mercur_imap_select_overflow.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack-based buffer overflow in Mercur v5.0 IMAP server via a malformed SELECT command. It targets specific Windows versions with predefined return addresses to achieve remote code execution.
Description
Stack-based buffer overflow in the IMAP service in Mercur Messaging 5.0 SP3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long string to the (1) LOGIN or (2) SELECT command, a different set of attack vectors and possibly a different vulnerability than CVE-2003-1177.
Exploits (8)
This is a Metasploit module exploiting a stack-based buffer overflow in Mercur v5.0 IMAP server via a malformed SELECT command. It targets specific Windows versions with predefined return addresses to achieve remote code execution.
This is a Metasploit module exploiting a stack buffer overflow in Atrium Mercur IMAP 5.0 SP3 via a malformed LOGIN command. It uses an egghunter to locate and execute the payload, targeting specific return addresses for Windows 2000 and XP.
This exploit targets a buffer overflow vulnerability in Mercur Messaging 2005 SP3 IMAP service. It uses an egghunter technique to locate and execute a bind shell payload, providing remote code execution on the target system.
This exploit targets a buffer overflow vulnerability in the IMAP service (CVE-2006-1255) to achieve remote code execution. It sends a crafted SELECT command with NOP sleds, assembly instructions, and shellcode to spawn a bind shell on port 4444.
This Perl script exploits a buffer overflow vulnerability in Sami FTP Server 2.0.2 via a malformed LOGIN command. It includes shellcode for a bind shell on port 4444 and supports multiple return addresses for different Windows versions.
This exploit targets a buffer overflow vulnerability in Atrium Mercur IMAP 5.0 SP3. It sends a crafted IMAP command with a malicious payload to achieve remote code execution, establishing a reverse shell to a specified IP and port.
This Metasploit module exploits a stack-based buffer overflow in Mercur v5.0 IMAP server by sending a maliciously crafted SELECT command. The exploit targets specific return addresses for Windows 2000 variants and delivers a payload to achieve remote code execution.
This Metasploit module exploits a stack buffer overflow in Atrium Mercur IMAP 5.0 SP3 via a malformed LOGIN command. It uses an egghunter to locate the payload in memory and achieves remote code execution on vulnerable Windows systems.