CVE-2007-1675
EXPLOITEDIBM Lotus Domino - Denial of Service via CRAM-MD5 Authentication Buffer Overflow
Title source: llmExploitation Summary
CVE-2007-1675 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 3 public exploits from researchers including dmc & prdelka, muts, Winny Thomas.
AI-analyzed exploit summary This exploit targets a vulnerability in IBM Lotus Domino IMAP4 Server (CVE-2007-1675) by leveraging a buffer overflow to achieve remote code execution. It uses a combination of shellcode, an egghunter, and a carefully crafted payload to bypass memory constraints and execute arbitrary code.
Description
Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server (nimap.exe) in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a denial of service via a long username.
Exploits (3)
This exploit targets a vulnerability in IBM Lotus Domino IMAP4 Server (CVE-2007-1675) by leveraging a buffer overflow to achieve remote code execution. It uses a combination of shellcode, an egghunter, and a carefully crafted payload to bypass memory constraints and execute arbitrary code.
This exploit targets a buffer overflow vulnerability in IBM Lotus Domino Server 6.5 IMAP service, delivering a bind shell payload. It uses an egghunter technique to locate and execute the shellcode in memory.
This exploit triggers a DoS in IBM Lotus Domino Server 6.5 by sending a malformed IMAP authentication request with a 256-byte username, causing the IMAP service to crash. The payload includes a struct-packed DWORD (0x58585858) but does not achieve code execution.