critical10.0Public exploit code

CVE-2004-1211

Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service (application crash) and possibl…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Mercury/32 Mail Server 4.01a - IMAP RENAME Buffer Overflow (Metasploit)2010-05-09 · remote · windows · Verified
Mercury/32 Mail Server 3.32 < 4.51 - SMTP EIP Overwrite2007-08-26 · remote · windows · Verified
Mercury/32 Mail Server 4.0.1 - 'LOGIN' Remote IMAP Stack Buffer Overflow2007-03-24 · remote · windows · Verified
Mercury/32 Mail Server 4.01a - 'check' Buffer Overflow2004-12-01 · dos · windows · Verified
Mercury/32 Mail Server 4.01 - 'Pegasus' IMAP Buffer Overflow (2)2004-12-01 · remote · windows · Verified
Mercury/32 Mail Server 4.01 - 'Pegasus' IMAP Buffer Overflow (1)2004-11-30 · remote · windows · Verified
Mercury/32 Mail Server 4.01 - 'Pegasus' IMAP Buffer Overflow (3)2004-11-29 · remote · windows · Verified

Impact

Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via long arguments to the (1) EXAMINE, (2) SUBSCRIBE, (3) STATUS, (4) APPEND, (5) CHECK, (6) CLOSE, (7) EXPUNGE, (8) FETCH, (9) RENAME, (10) DELETE, (11) LIST, (12) SEARCH, (13) CREATE, or (14) UNSUBSCRIBE commands.

Affected products

Vendor	Product	Affected versions
David Harris	Mercury	Version 4.0.1a

Weakness classification

CWE-119

Public exploit code

Impact

Affected products

Weakness classification

References