CVE-2007-5467
eXtremail < 2.1.1 - Remote Code Execution via POP3 USER Command Integer Overflow
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2007-5467. PoCs published by mu-b.
AI-analyzed exploit summary This exploit targets a stack overflow vulnerability in eXtremail's ifParseAuthPlain function, allowing remote code execution via a crafted AUTHENTICATE PLAIN command. It includes shellcode for a bind shell and leverages base64 encoding to bypass input restrictions.
Description
Integer overflow in eXtremail 2.1.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long USER command containing "%s" sequences to the pop3 port (110/tcp), which are expanded to "%%s" before being used in the memmove function, possibly due to an incomplete fix for CVE-2001-1078.
Exploits (4)
This exploit targets a stack overflow vulnerability in eXtremail's ifParseAuthPlain function, allowing remote code execution via a crafted AUTHENTICATE PLAIN command. It includes shellcode for a bind shell and leverages base64 encoding to bypass input restrictions.
This exploit targets a buffer overflow in the LOGIN command of eXtremail's admin interface, allowing remote code execution. It includes shellcode for a bind shell and is designed for specific versions of eXtremail on Linux.
This exploit targets a buffer overflow vulnerability in eXtremail <=2.1.1 by sending a crafted payload to the IMAP service on port 143. It attempts to crash the service by sending oversized buffers, demonstrating a denial-of-service condition.
This exploit targets a buffer overflow vulnerability in eXtremail <=2.1.1 via the POP3 USER command. It sends malformed input with varying lengths of NOPs and format specifiers to trigger a crash or potential remote code execution.