1510 matches found
Debian DSA-939-1 : fetchmail - programming error
Daniel Drake discovered a problem in fetchmail, an SSL enabled POP3, APOP, IMAP mail gatherer/forwarder, that can cause a crash when the program is running in multidrop mode and receives messages without headers. The old stable distribution woody does not seem to be affected by this problem...
YPOPS 0.6 Buffer Overflow
This module exploits a stack buffer overflow in the YPOPS POP3 service. This is a classic stack buffer overflow for YPOPS version 0.6. Possibly Affected version 0.5, 0.4.5.1, 0.4.5. Eip point to jmp ebx opcode in ws32.dll This module requires Metasploit: https://metasploit.com/download Current...
Weak xbiff 2 file permissions
.xbiff2rc is world-readable, making it's possible to retrieve POP3 / IMAP account password...
CVE-2006-4364
Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via long strings that contain '@' characters in the 1 USER and 2 APOP commands...
mdaemon_poc.txt
PoC for Mdaemon POP3 preauth heap overflow Coded by Leon Juranic Infigo IS $host = '192.168.0.105'; use IO::Socket; for $x = 0 ; $x $host,PeerPort = '110', Proto = 'tcp' || die "socket error\n\n"; recv $sock, $var, 10000,0; print $var; print $sock "USER " . "@A" x 160 . "\r\n"; recv $sock, $var,...
Alt-N MDaemon POP3 Server 9.06 - USER Remote Heap Overflow
Alt-N MDaemon POP3 Server 9.06 - USER Remote Heap Overflow !/usr/bin/python import sys import struct import socket from time import sleep MDaemon Pre Authentication USER Heap Overflow Code based on Leon Juranic's exploit Coded by muts - [email protected] http://www.hackingdefined.com...
Alt-N MDaemon POP3 Server < 9.06 - 'USER' Remote Heap Overflow
!/usr/bin/python import sys import struct import socket from time import sleep MDaemon Pre Authentication USER Heap Overflow Code based on Leon Juranic's exploit Coded by muts - [email protected] http://www.hackingdefined.com http://www.remote-exploit.org Tested on: Mdaemon 9.0.5 Mdaemon 7.2....
CVE-2006-4364
CVE-2006-4364 affects Alt-N Technologies’ MDaemon POP3 server prior to version 9.0.6. The vulnerability is due to multiple heap-based buffer overflows triggered by long strings containing '@' characters in the USER and APOP commands. Exploitation can cause a daemon crash (DoS) and may allow remot...
CVE-2006-4364
Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via long strings that contain '@' characters in the 1 USER and 2 APOP commands...
Alt-N MDaemon POP3 server buffer overflow
Buffer overflow on oversized username with '@' character in USER/APOP command...
MDaemon < 9.0.6 POP3 Server USER / APOP Command Remote Overflow
According to its banner, the POP3 server bundled with the version of MDaemon on the remote host has two buffer overflows that can be triggered with long arguments to the 'USER' and 'APOP' commands. By exploiting these issues, a remote, unauthenticated user can reportedly crash the affected servic...
MDaemon POP3 Server < 9.06 - 'USER' Remote Buffer Overflow (PoC)
PoC for Mdaemon POP3 preauth heap overflow Coded by Leon Juranic Infigo IS $host = '192.168.0.105'; use IO::Socket; for $x = 0 ; $x $host,PeerPort = '110', Proto = 'tcp' || die "socket error\n\n"; recv $sock, $var, 10000,0; print $var; print $sock "USER " . "@A" x 160 . "\r\n"; recv $sock, $var,...
MDaemon POP3 Server < 9.06 (USER) Remote Buffer Overflow PoC
No description provided by source. PoC for Mdaemon POP3 preauth heap overflow Coded by Leon Juranic [email protected] Infigo IS http://www.infigo.hr $host = '192.168.0.105'; use IO::Socket; for $x = 0 ; $x 12 ; $x++ $sock = new IO::Socket::INET PeerAddr = $host,PeerPort = '110', Proto = 'tcp...
MDaemon POP3 Server < 9.06 (USER) Remote Buffer Overflow PoC
Exploit for unknown platform in category dos / poc ============================================================ MDaemon POP3 Server Infigo IS $host = '192.168.0.105'; use IO::Socket; for $x = 0 ; $x $host,PeerPort = '110', Proto = 'tcp' || die "socket error\n\n"; recv $sock, $var, 10000,0; print...
MDaemon POP3 Server 9.06 - USER Remote Buffer Overflow (PoC)
MDaemon POP3 Server 9.06 - USER Remote Buffer Overflow PoC PoC for Mdaemon POP3 preauth heap overflow Coded by Leon Juranic Infigo IS $host = '192.168.0.105'; use IO::Socket; for $x = 0 ; $x $host,PeerPort = '110', Proto = 'tcp' || die "socket error\n\n"; recv $sock, $var, 10000,0; print $var;...
getpwnedmail-ppc.pl.txt
!/usr/bin/perl getpwnedmail.pl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom This is a canibalized version of "Kansas City POP Daemon Version 0.0" - Copyright c 1999 David Nicol kevin-finisterres-mac-mini: kfinisterre$ /usr/bin/fetchmail -p pop3 --fastuidl 1 localhos...
[ECHO_ADV_42$2006] BufferOverflow in Eremove Client
/ / | | / // / | | Y / | / / /| / / / / / / .OR.ID ECHOADV42$2006 --------------------------------------------------------------------------- ECHOADV42$2006 BufferOverflow in Eremove Client --------------------------------------------------------------------------- Author : Dedi Dwianto Date : Au...
Fetchmail buffer overflow
Buffer overflow on oversized POP3 UIDL reply...
Security Best Practice: POP3/IMAP Security
Post Office Protocol version 3 POP3 and Internet Messaging Access Protocol version 4 IMAP4 are electronic mail protocols used to retrieve messages stored in e-mail servers.There are several serious security limitations with these protocols that allow malicious attackers to compromise a remote...