CVE-2007-4560
ClamAV < 0.91.2 - Remote Code Execution via Shell Metacharacters in Sendmail Recipient Field
Title source: llmExploitation Summary
EIP tracks 8 public exploits for CVE-2007-4560.
PoCs published by Metasploit, eliteboy, patrick, including Metasploit module exploits/unix/smtp/clamav_milter_blackhole.
AI-analyzed exploit summary This Metasploit module exploits CVE-2007-4560 in ClamAV Milter's blackhole mode, allowing remote code execution via an insecure popen call. It injects a payload into the 'From:' header of an SMTP message, which is then executed by the vulnerable service.
Description
clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters that are used in a certain popen call, involving the "recipient field of sendmail."
Exploits (8)
This Metasploit module exploits CVE-2007-4560 in ClamAV Milter's blackhole mode, allowing remote code execution via an insecure popen call. It injects a payload into the 'From:' header of an SMTP message, which is then executed by the vulnerable service.
This exploit targets a vulnerability in Sendmail with clamav-milter by injecting commands into the RCPT TO field to modify /etc/inetd.conf and restart the inetd service, resulting in a root shell. The exploit leverages improper input validation in the email address parsing.
This Metasploit module exploits CVE-2007-4560 in ClamAV's clamav-milter (Sendmail mail filter) by injecting a command into the 'From:' header of an SMTP email, which is then executed due to an insecure popen call in black hole mode.
This repository contains a functional Python exploit for CVE-2007-4560, targeting Sendmail with ClamAV-Milter <0.91.2. The exploit leverages command injection via crafted SMTP RCPT TO headers to achieve remote root code execution by modifying /etc/inetd.conf and restarting the inetd service.
This repository contains a functional Python exploit for CVE-2007-4560, targeting Sendmail with ClamAV-Milter <0.91.2. The exploit leverages improper input sanitization in SMTP RCPT TO headers to achieve remote command execution with root privileges.
This repository contains a functional Python exploit for CVE-2007-4560, targeting Sendmail with ClamAV-Milter <0.91.2. The exploit injects commands via SMTP RCPT TO headers to achieve remote root command execution by modifying /etc/inetd.conf and restarting the inetd service.
This repository contains a functional exploit for CVE-2007-4560, targeting ClamAV Milter Sendmail versions prior to 0.91.2. The exploit leverages a command injection vulnerability in the email processing logic by crafting a malicious RCPT TO field to achieve remote code execution.
This Metasploit module exploits a command injection vulnerability in ClamAV Milter's blackhole mode (CVE-2007-4560) by injecting a malicious RCPT TO address and embedding a payload in the 'From:' header, leading to remote code execution.