net-imap vulnerable to command Injection via unvalidated Symbol inputs

Summary Symbol arguments to commands are vulnerable to a CRLF Injection / IMAP Command injection via Symbol arguments passed to IMAP commands. Details Symbol arguments represent IMAP "system flags", which are formatted as "atoms" with no quoting with a "" prefix. Vulnerable versions of Net::IMAP...

eudora-seh-overwrite.txt

!/usr/bin/python Eudora 7.1 IMAP FLAGS 0day Remote SEH Overwrite PoC Exploit Bug discovered by Krystian Kloskowski h07 Tested on Eudora 7.1.0.9 / 2k SP4 Polish Shellcode type: Windows Execute Command calc.exe Details:.. Eudora -- SELECT IMBOX --------- IMAP server Eudora -- FLAGS ..AAAA... ----...

Eudora 7.1.0.9 (IMAP FLAGS) Remote SEH Overwrite Exploit 0day

Exploit for unknown platform in category remote exploits ============================================================= Eudora 7.1.0.9 IMAP FLAGS Remote SEH Overwrite Exploit 0day ============================================================= !/usr/bin/python Eudora 7.1 IMAP FLAGS 0day Remote SEH...