7.5
CVSSv2

CVE-2000-0284

Published: 16/04/2000 Updated: 10/09/2008
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 790
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands.

Vulnerable Product Search on Vulmon Subscribe to Product

university of washington imap 12.264

Exploits

/* 7350owex- x86/linux WU-IMAP 2000287(1-2) remote exploit * * TESO CONFIDENTIAL - SOURCE MATERIALS * * This is unpublished proprietary source code of TESO Security * * The contents of these coded instructions, statements and computer * programs may not be disclosed to third parties, copied or duplicated in * any form, in whole or in part, withou ...
source: wwwsecurityfocuscom/bid/1110/info A buffer overflow exists in imapd The vulnerability exists in the list command By supplying a long, well-crafted string as the second argument to the list command, it becomes possible to execute code on the machine Executing the list command requires an account on the machine In addition, pri ...
/* * !!! Private !!! * * imapd IMAP4rev1 v12261, v12264 and 2000284 Remote Exploit Others? Yes! * * By: SkyLaZarT ( fcerqueira@bufferoverfloworg ) aka Felipe Cerqueira * Homepage: wwwBufferOverflowOrg * Thankz: cync, oldm and Jans ( BufferOverfloworg Team ) * Antonio Marcelo and Felipe Saraiva * */ #include <stdio ...
source: wwwsecurityfocuscom/bid/1110/info A buffer overflow exists in imapd The vulnerability exists in the list command By supplying a long, well-crafted string as the second argument to the list command, it becomes possible to execute code on the machine Executing the list command requires an account on the machine In addition, ...
#!/usr/bin/perl ## * Successfully tested on IMAP4rev1 v10190 * ## Written by: teleh0r@doglovercom / anno 2000 ## ## This is nothing new - just wrote it for fun $shellcode = "\xeb\x35\x5e\x80\x46\x01\x30\x80\x46\x02\x30\x80" "\x46\x03\x30\x80\x46\x05\x30\x80\x46\x06\x30\x89" "\xf0\x89\x46\x08\x31\xc0\x88\x46\x07\x89\ ...
## # $Id$ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote include Ms ...
source: wwwsecurityfocuscom/bid/1110/info A buffer overflow exists in imapd The vulnerability exists in the list command By supplying a long, well-crafted string as the second argument to the list command, it becomes possible to execute code on the machine Executing the list command requires an account on the machine In addition, p ...
## # $Id: imap_uw_lsubrb 8932 2010-03-26 19:00:23Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class Met ...