CVE-2007-5466 Multiple buffer overflows in eXtremail 2.1.1 and earlier allow remote attackers to (1) have an unknown impact by sending multiple long strings to the IMAP port (143/tcp); (2) execute arbitrary code vi...
HighCVSS 10.0
EPSS 19.9%
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple buffer overflows in eXtremail 2.1.1 and earlier allow remote attackers to (1) have an unknown impact by sending multiple long strings to the IMAP port (143/tcp); (2) execute arbitrary code via a long string in an IMAP AUTHENTICATE PLAIN action, involving the ifParseAuthPlain function; (3) execute arbitrary code via a long LOGIN command to the admin interface port (4501/tcp); or (4) execute arbitrary code via a long string in an IMAP AUTHENTICATE LOGIN (aka CRAM-MD5 authentication) action, involving the ifProcImapAuth1 function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| extremail | <= 2.1.1 | No fix listed |
References
- 27220 third-party-advisory vendor-advisory
- www.digit-labs.org
- www.digit-labs.org
- www.digit-labs.org
- www.digit-labs.org
- 20071015 eXtremail(ly easy) remote roots mailing-list
- 26074 vdb-entry
- extremail-crammd5-bo(37209) vdb-entry
- 4533 exploit
- 4534 exploit
- 4535 exploit