high7.5Public exploit code
CVE-2006-5551
Stack-based buffer overflow in QK SMTP 3.01 and earlier might allow remote attackers to execute arbitrary code via a long argument to the RCPT TO command.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- QK SMTP 3.01 - 'RCPT TO' Remote Buffer Overflow (2)2007-01-01 · remote · windows · Verified
- QK SMTP 3.01 - 'RCPT TO' Remote Buffer Overflow (1)2006-10-25 · remote · windows · Verified
- QK SMTP 3.01 - 'RCPT TO' Remote Denial of Service2006-10-23 · dos · windows · Verified
Impact
Stack-based buffer overflow in QK SMTP 3.01 and earlier might allow remote attackers to execute arbitrary code via a long argument to the RCPT TO command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qksoft | Qk Smtp | through 3.0.1 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/22563
- http://securitytracker.com/id?1017114
- http://www.securityfocus.com/bid/20681
- http://www.vupen.com/english/advisories/2006/4169
- https://www.exploit-db.com/exploits/2625
- http://secunia.com/advisories/22563
- http://securitytracker.com/id?1017114
- http://www.securityfocus.com/bid/20681
- http://www.vupen.com/english/advisories/2006/4169
- https://www.exploit-db.com/exploits/2625