CVE-2002-1057

CVE-2002-1057: A buffer overflow in SmartMax MailMax POP3 daemon (popmax) 4.8 allows remote attackers to execute arbitrary code via a long USER command. The root cause is a buffer overflow in the POP3 daemon, with impact described as remote code execution. Exploitation details and a software fix ...

CVE-2002-1057

Buffer overflow in SmartMax MailMax POP3 daemon popmax 4.8 allows remote attackers to execute arbitrary code via a long USER command...

MailMax security advisory/exploit/patch

/ mmaxexp.c July 20th, 2002 SmartMax MailMax Standard/Professional 4.8 http://www.smartmax.com an overflow is present in the USER argument of the pop3max daemon.. however, we do not get eip.. but with buffers of various sizes we can get eax, ecx, and edx.. edx being the most useful as shown below...

Buffer overflow in Mailmax

Buffer overflow in USER command...

SmartMax MailMax 4.8 - Popmax Buffer Overflow

// source: https://www.securityfocus.com/bid/5285/info Reportedly, MailMax is vulnerable to buffer overflow attacks against its POP3 daemon, popmax. The vulnerability occurs due to improper bounds checking of the 'USER' argument. It is possible for an attacker to cause the buffer overflow conditi...

SmartMax MailMax 4.8 - Popmax Buffer Overflow

SmartMax MailMax 4.8 - Popmax Buffer Overflow // source: https://www.securityfocus.com/bid/5285/info Reportedly, MailMax is vulnerable to buffer overflow attacks against its POP3 daemon, popmax. The vulnerability occurs due to improper bounds checking of the 'USER' argument. It is possible for an...

SmartMax MailMax 1.0 - SMTP Buffer Overflow

SmartMax MailMax 1.0 - SMTP Buffer Overflow // source: https://www.securityfocus.com/bid/2312/info Smartmax MailMax is an email server for Windows 95/98/NT. It is vulnerable to buffer overflow attacks against the SMTP-command processing function. This can be exploited to execute arbitrary command...

SmartMax MailMax 1.0 - SMTP Buffer Overflow

// source: https://www.securityfocus.com/bid/2312/info Smartmax MailMax is an email server for Windows 95/98/NT. It is vulnerable to buffer overflow attacks against the SMTP-command processing function. This can be exploited to execute arbitrary commands with the privileges of the SMTP process...