high7.5Public exploit code
CVE-2007-4440
Stack-based buffer overflow in the MercuryS SMTP server in Mercury Mail Transport System, possibly 4.51 and earlier, allows remote attackers to execute arbitra…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Mercury/32 Mail SMTPD - AUTH CRAM-MD5 Buffer Overflow (Metasploit)2010-06-22 · remote · windows · Verified
- Mercury/32 Mail SMTPD 4.51 - SMTPD CRAM-MD5 Remote Overflow2007-08-22 · remote · windows · Verified
- Mercury/32 Mail SMTPD - Remote Stack Overrun (PoC)2007-08-18 · dos · windows · Verified
Impact
Stack-based buffer overflow in the MercuryS SMTP server in Mercury Mail Transport System, possibly 4.51 and earlier, allows remote attackers to execute arbitrary code via a long AUTH CRAM-MD5 string. NOTE: this might overlap CVE-2006-5961.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pmail | Mercury Mail Transport System | through 4.51 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2007-08/0341.html
- http://secunia.com/advisories/26519
- http://www.pmail.com/m32_451.htm
- http://www.securityfocus.com/bid/25357
- http://www.securitytracker.com/id?1018587
- http://www.vupen.com/english/advisories/2007/2918
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36117
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36299
- https://www.exploit-db.com/exploits/4294
- http://archives.neohapsis.com/archives/fulldisclosure/2007-08/0341.html
- http://secunia.com/advisories/26519
- http://www.pmail.com/m32_451.htm
- http://www.securityfocus.com/bid/25357
- http://www.securitytracker.com/id?1018587
- http://www.vupen.com/english/advisories/2007/2918
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36117
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36299
- https://www.exploit-db.com/exploits/4294