7.5
CVSSv2

CVE-2004-1558

Published: 31/12/2004 Updated: 11/07/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 765
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple stack-based buffer overflows in YPOPs! (aka YahooPOPS) 0.4 up to and including 0.6 allow remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) POP3 USER command or (2) SMTP request.

Vulnerable Product Search on Vulmon Subscribe to Product

ypops ypops 0.5

ypops ypops 0.6

ypops ypops 0.4

ypops ypops 0.4.1

ypops ypops 0.4.2

ypops ypops 0.4.3

ypops ypops 0.4.4

ypops ypops 0.4.5

ypops ypops 0.4.6

Exploits

//Diabolic Crab's exploit for YahooPOPs <= 16 SMTP //dcrab@hackerscentercom //wwwhackerscentercom //For more work check out, icisdigitalparadoxorg //This was done at 4 am so escuse the messy code if any //Good job class101 on the windows version ;) #include <stdioh> #include <stdlibh> #include <stringh> #includ ...
/* YahooPOPS v16 and prior SMTP port buffer overflow exploit v01 Exploit code by class101 [at] DFindkd-teamcom Bind a shellcode to the port 101 Thanx to Behrang Fouladi(behrang@hat-squadcom) for the bug discovery Thanx to HDMoore and Metasploitcom for their kickass ASM work Instead of to move like you Behrang EBX to ESP after overwrittin ...
## # $Id: ypops_overflow1rb 9262 2010-05-09 17:45:00Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class ...

Github Repositories

exploits This repo is being used to host both newly found exploits, and old exploits I've been rewriting in python Kerio Personal Firewall 214 - Remote Code Execution (CVE-2003-0220) stevekellyorguk/2018/07/26/exploit-rewrite-kerio-personal-firewall-2-1-4/ KerioFirewall/KerioFirewall_21py YahooPOPs 06 - SMTP Remote Buffer Overflow (CVE-2004-1558) s