CVE-2006-5551
qk_smtp < 3.0.1 - Remote Code Execution via RCPT TO Command
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2006-5551. PoCs published by Jacopo Cervini, Expanders, Greg Linares.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in QKSmtpServer3.exe via the RCPT TO command. It uses a crafted payload to execute a bind shell on port 4444, leveraging a hardcoded return address and encoded shellcode.
Description
Stack-based buffer overflow in QK SMTP 3.01 and earlier might allow remote attackers to execute arbitrary code via a long argument to the RCPT TO command.
Exploits (3)
This exploit targets a buffer overflow vulnerability in QKSmtpServer3.exe via the RCPT TO command. It uses a crafted payload to execute a bind shell on port 4444, leveraging a hardcoded return address and encoded shellcode.
This exploit targets a buffer overflow vulnerability in QK SMTP <= 3.01 via the RCPT-TO command. It uses a combination of Unicode-aware shellcode and a custom jmpback payload to achieve remote code execution, adding a user to the system.
This exploit targets a format string vulnerability in QK SMTP Server 3.01 and lower via the RCPT TO command, causing a denial-of-service (DoS) by overwriting registers like EIP, EBP, ESI, and EAX. The PoC sends a large buffer to trigger the overflow, demonstrating the vulnerability's potential for further exploitation.