CVE-2007-1373
Mercury Mail Transport System < 4.01b - Remote Code Execution via Long LOGIN Command
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2007-1373.
PoCs published by Metasploit, mu-b, c0d3r, including Metasploit module exploits/windows/imap/mercury_login.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack buffer overflow in Mercury/32 IMAPD's LOGIN verb. It sends a crafted login command to overflow the buffer and execute arbitrary code via a reverse shell payload.
Description
Stack-based buffer overflow in Mercury/32 (aka Mercury Mail Transport System) 4.01b and earlier allows remote attackers to execute arbitrary code via a long LOGIN command. NOTE: this might be the same issue as CVE-2006-5961.
Exploits (4)
This is a Metasploit module exploiting a stack buffer overflow in Mercury/32 IMAPD's LOGIN verb. It sends a crafted login command to overflow the buffer and execute arbitrary code via a reverse shell payload.
This exploit targets a stack-based buffer overflow in Mercury/32 IMAP server versions prior to 4.01b. It sends a maliciously crafted LOGIN command with excessive continuation data to trigger the overflow, potentially allowing remote code execution without authentication.
This is a functional exploit for CVE-2007-1373, targeting a buffer overflow in Mercury IMAP Server 4.01a. It includes shellcode for remote code execution and supports multiple Windows targets.
This Metasploit module exploits a stack buffer overflow in Mercury/32 IMAPD via a crafted LOGIN command, achieving remote code execution through SEH overwrite and egghunter techniques.