critical10.0Public exploit code
CVE-2007-5467
Integer overflow in eXtremail 2.1.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long USER comm…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- eXtremail 2.1.1 - Remote Heap Overflow (PoC)2007-10-15 · dos · linux · Verified
- eXtremail 2.1.1 - PLAIN Authentication Remote Stack Overflow2007-10-15 · remote · linux · Verified
- eXtremail 2.1.1 - 'LOGIN' Remote Stack Overflow2007-10-15 · remote · linux · Verified
- eXtremail 2.1.1 - 'memmove()' Remote Denial of Service2007-10-15 · dos · linux · Verified
Impact
Integer overflow in eXtremail 2.1.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long USER command containing "%s" sequences to the pop3 port (110/tcp), which are expanded to "%%s" before being used in the memmove function, possibly due to an incomplete fix for CVE-2001-1078.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Extremail | Extremail | through 2.1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/27220
- http://www.digit-labs.org/files/exploits/extremail-v3.pl
- http://www.securityfocus.com/archive/1/482293
- http://www.securityfocus.com/bid/26074
- https://www.exploit-db.com/exploits/4532
- http://secunia.com/advisories/27220
- http://www.digit-labs.org/files/exploits/extremail-v3.pl
- http://www.securityfocus.com/archive/1/482293
- http://www.securityfocus.com/bid/26074
- https://www.exploit-db.com/exploits/4532