CVE-2006-2502
Cyrus IMAPD 2.3.2 - Stack-Based Buffer Overflow via Long USER Command
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2006-2502.
PoCs published by Metasploit, K-sPecial, kingcope, including Metasploit module exploits/linux/pop3/cyrus_pop3d_popsubfolders.
AI-analyzed exploit summary This exploit targets a stack-based buffer overflow in Cyrus IMAPD's pop3d service (CVE-2006-2502), leveraging a write-anywhere condition to overwrite the GOT and execute shellcode. It bypasses VA randomization by overwriting a pointer used in a memcpy operation.
Description
Stack-based buffer overflow in pop3d in Cyrus IMAPD (cyrus-imapd) 2.3.2, when the popsubfolders option is enabled, allows remote attackers to execute arbitrary code via a long USER command.
Exploits (4)
This exploit targets a stack-based buffer overflow in Cyrus IMAPD's pop3d service (CVE-2006-2502), leveraging a write-anywhere condition to overwrite the GOT and execute shellcode. It bypasses VA randomization by overwriting a pointer used in a memcpy operation.
This exploit targets a buffer overflow vulnerability in Cyrus POP3d (CVE-2006-2502) by sending a maliciously crafted USER command with shellcode and a controlled offset to overwrite EIP. It binds a shell to port 13370 upon successful exploitation.
This exploit targets a buffer overflow vulnerability in Cyrus IMAPD's POP3 service (CVE-2006-2502) when popsubfolders is enabled. It sends a crafted USER command with NOP sleds and shellcode to achieve remote code execution, binding a shell to port 13370.
This exploit targets a stack-based buffer overflow in Cyrus IMAPD's pop3d service via the non-default 'popsubfolders' option. It leverages a write-anywhere condition to overwrite the GOT and execute shellcode, bypassing stack protections like VA randomization.