CVE-2006-4379
Ipswitch Collaboration Suite, IMail, IMail Plus, and IMail Secure - Stack-Based Buffer Overflow via SMTP Daemon
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2006-4379. PoCs published by Jacopo Cervini, Greg Linares.
AI-analyzed exploit summary This exploit targets a stack-based buffer overflow in IMail 2006 and 8.x SMTP service via a maliciously crafted RCPT TO command. It leverages a SEH overwrite to achieve remote code execution on vulnerable Windows systems.
Description
Stack-based buffer overflow in the SMTP Daemon in Ipswitch Collaboration 2006 Suite Premium and Standard Editions, IMail, IMail Plus, and IMail Secure allows remote attackers to execute arbitrary code via a long string located after an '@' character and before a ':' character.
Exploits (3)
This exploit targets a stack-based buffer overflow in IMail 2006 and 8.x SMTP service via a maliciously crafted RCPT TO command. It leverages a SEH overwrite to achieve remote code execution on vulnerable Windows systems.
This exploit targets a buffer overflow vulnerability in IMail SMTP server (CVE-2006-4379) by sending a maliciously crafted RCPT TO command. It includes shellcode for a bind shell on port 4444 and supports two versions of IMail (8.10 and 8.12).
This exploit targets a stack overflow vulnerability in IMail 2006 and 8.x SMTP servers via the 'RCPT TO:' command. It includes multiple payloads for different actions such as adding a user, changing the administrator password, or creating a network share.