CVE-2004-1558 Multiple stack-based buffer overflows in YPOPs! (aka YahooPOPS) 0.4 through 0.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) POP3 USER...
HighCVSS 7.5
EPSS 71.1%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple stack-based buffer overflows in YPOPs! (aka YahooPOPS) 0.4 through 0.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) POP3 USER command or (2) SMTP request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ypops | = 0.4 | No fix listed |
| ypops | = 0.4.1 | No fix listed |
| ypops | = 0.4.2 | No fix listed |
| ypops | = 0.4.3 | No fix listed |
| ypops | = 0.4.4 | No fix listed |
| ypops | = 0.4.5 | No fix listed |
| ypops | = 0.4.6 | No fix listed |
| ypops | = 0.5 | No fix listed |
| ypops | = 0.6 | No fix listed |
References
- dbeusee.home.comcast.net
- 20040927 [Hat-Squad] Remote Buffer overflow Vulnerability in YahooPOPS mailing-list
- 12660 third-party-advisory
- 1011426 vdb-entry
- 20061020 vendor ACK for old YPOPs! issue mailing-list
- www.hat-squad.com exploit vendor-advisory
- 10366 vdb-entry
- 10367 vdb-entry
- 11256 exploit patch vdb-entry
- ypops-pop3-bo(17515) vdb-entry
- ypops-smtp-bo(17518) vdb-entry