CVE-2007-5466
eXtremail <= 2.1.1 - Remote Code Execution via IMAP Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2007-5466. PoCs published by mu-b.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in eXtremail <=2.1.1 by sending a crafted payload to the IMAP service on port 143. It attempts to crash the service by sending oversized buffers, demonstrating a denial-of-service condition.
Description
Multiple buffer overflows in eXtremail 2.1.1 and earlier allow remote attackers to (1) have an unknown impact by sending multiple long strings to the IMAP port (143/tcp); (2) execute arbitrary code via a long string in an IMAP AUTHENTICATE PLAIN action, involving the ifParseAuthPlain function; (3) execute arbitrary code via a long LOGIN command to the admin interface port (4501/tcp); or (4) execute arbitrary code via a long string in an IMAP AUTHENTICATE LOGIN (aka CRAM-MD5 authentication) action, involving the ifProcImapAuth1 function.
Exploits (3)
This exploit targets a buffer overflow vulnerability in eXtremail <=2.1.1 by sending a crafted payload to the IMAP service on port 143. It attempts to crash the service by sending oversized buffers, demonstrating a denial-of-service condition.
This exploit targets a stack overflow vulnerability in eXtremail's ifParseAuthPlain function, allowing remote code execution via a crafted AUTHENTICATE PLAIN command. It includes shellcode for a bind shell and leverages base64 encoding to bypass input restrictions.
This exploit targets a buffer overflow in the LOGIN command of eXtremail's admin interface, allowing remote code execution. It includes shellcode for a bind shell and is designed for specific versions of eXtremail on Linux.