40 matches found
Sendmail <= 8.12.8 prescan() BSD Remote Root Exploit
No description provided by source. / Sendmail 8.12.8 prescan PROOF OF CONCEPT exploit by bysin This is to prove that the bug in sendmail 8.12.8 and below is vulnerable. On sucessful POC exploitation the program should crash with the following: Program received signal SIGSEGV, Segmentation fault...
Sendmail < 8.12.10 prescan() Function Remote Overflow
Binary data 2043.prm...
CVE-2003-0694
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c...
DEBIAN-CVE-2003-0694
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c...
CVE-2003-0694
The Sendmail 8.12.9 mail transfer agent is vulnerable to a remote code execution (RCE) flaw via a buffer overflow in the prescan function. This vulnerability is specifically triggered through the parseaddr function within the parseaddr.c file. Attackers can exploit this to execute arbitrary code ...
CVE-2003-0694: Undefined Security Weakness
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c...
Sendmail 8.12.9 - 'Prescan()' Variant Remote Buffer Overrun
/ source: https://www.securityfocus.com/bid/8641/info Sendmail is prone to a buffer overrun vulnerability in the prescan function. This issue is different than the vulnerability described in BID 7230. This vulnerability could permit remote attackers to execute arbitrary code via vulnerable versio...
Sendmail 8.12.9 - Prescan() Variant Remote Buffer Overrun
Sendmail 8.12.9 - Prescan Variant Remote Buffer Overrun / source: https://www.securityfocus.com/bid/8641/info Sendmail is prone to a buffer overrun vulnerability in the prescan function. This issue is different than the vulnerability described in BID 7230. This vulnerability could permit remote...
[Full-Disclosure] Sendmail 8.12.9 prescan bug (a new one) [CAN-2003-0694]
Hello lists, -------- Overview -------- There seems to be a remotely exploitable vulnerability in Sendmail up to and including the latest version, 8.12.9. The problem lies in prescan function, but is not related to previous issues with this code. The primary attack vector is an indirect invocatio...
Sendmail 8.12.8 (BSD) - 'Prescan()' Remote Command Execution
/ Sendmail 8.12.8 prescan PROOF OF CONCEPT exploit by bysin This is to prove that the bug in sendmail 8.12.8 and below is vulnerable. On sucessful POC exploitation the program should crash with the following: Program received signal SIGSEGV, Segmentation fault. 0x5c5c5c5c in ?? / include include...
Sendmail <= 8.12.8 prescan() BSD Remote Root Exploit
Exploit for linux platform in category remote exploits ==================================================== Sendmail include include include include include include include include int maxarch=1; struct arch char os; // The OS int pos; // The position of ebp in the stack, with the last byte being...
Sendmail 8.12.8 (BSD) - Prescan() Remote Command Execution
Sendmail 8.12.8 BSD - Prescan Remote Command Execution / Sendmail 8.12.8 prescan PROOF OF CONCEPT exploit by bysin This is to prove that the bug in sendmail 8.12.8 and below is vulnerable. On sucessful POC exploitation the program should crash with the following: Program received signal SIGSEGV,...
DEBIAN-CVE-2003-0161
The prescan function in the address parser parseaddr.c in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers t...
CVE-2003-0161
Technical details for CVE-2003-0161 are not publicly provided in the supplied documents; monitor for updates from the connected advisories and feeds.
CVE-2003-0161: Undefined Security Weakness
The prescan function in the address parser parseaddr.c in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers t...
Sendmail 8.11.6 - Address Prescan Memory Corruption
/ source: https://www.securityfocus.com/bid/7230/info A vulnerability in Sendmail may be exploited remotely to execute arbitrary code. The flaw is present in the 'prescan' procedure, which is used for processing email addresses in SMTP headers. This condition has been confirmed to be exploitable ...
Sendmail 8.11.6 - Address Prescan Memory Corruption
Sendmail 8.11.6 - Address Prescan Memory Corruption / source: https://www.securityfocus.com/bid/7230/info A vulnerability in Sendmail may be exploited remotely to execute arbitrary code. The flaw is present in the 'prescan' procedure, which is used for processing email addresses in SMTP headers...
sendmail-8.8.x-8.9.x.txt
Date: Sat, 12 Dec 1998 02:22:10 +0100 From: Michal Zalewski To: [email protected] Subject: Sendmail 8.8.x/8.9.x bugware Bottoms up! Two bugs and fixes - Sendmail 8.8.x/8.9.x. 1. Redirection attack Due to strange address parsing policy briefly: if address ends with local hostname, trim it and...
Sendmail 8.9.2 - Headers Prescan Denial of Service
Sendmail 8.9.2 - Headers Prescan Denial of Service / against.c - Another Sendmail and pine ;- DoS up to 8.9.2 c 1999 by Usage: ./against existinguseronvictimhost victimhost Example: ./against nobody lamers.net / include include include include include include include include include include inclu...
Sendmail 8.9.2 - Headers Prescan Denial of Service
/ against.c - Another Sendmail and pine ;- DoS up to 8.9.2 c 1999 by Usage: ./against existinguseronvictimhost victimhost Example: ./against nobody lamers.net / include include include include include include include include include include include include include define MAXCONN 4 define LINES...