medium6.0Public exploit code
CVE-2007-5018
Stack-based buffer overflow in IMAPD in Mercury/32 4.52 allows remote authenticated users to execute arbitrary code via a long argument in a SEARCH ON command.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Mercury/32 4.52 IMAPD - 'SEARCH' (Authenticated) Overflow2007-09-19 · remote · windows · Verified
Impact
Stack-based buffer overflow in IMAPD in Mercury/32 4.52 allows remote authenticated users to execute arbitrary code via a long argument in a SEARCH ON command. NOTE: this issue might overlap with CVE-2004-1211.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| David Harris | Mercury 32 | Version 4.5.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/39670
- http://secunia.com/advisories/26878
- http://www.securityfocus.com/bid/25733
- http://www.securitytracker.com/id?1018714
- http://www.vupen.com/english/advisories/2007/3224
- https://www.exploit-db.com/exploits/4429
- http://osvdb.org/39670
- http://secunia.com/advisories/26878
- http://www.securityfocus.com/bid/25733
- http://www.securitytracker.com/id?1018714
- http://www.vupen.com/english/advisories/2007/3224
- https://www.exploit-db.com/exploits/4429