CVE-2004-1211

60Vexday Risk Score

Corrige pronto. Ella tiene exploit funcional público.

ssvc Attendepss 72%

de la publicación al arma0 días

Publicada en NVD15 dic

1ª PoC29 nov

metasploit29 nov

probabilidad de explotación

72%top 1% de las CVE

explotación observada

noninguna fuente lo reporta

7 exploit(s) público(s)

Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via long arguments to the (1) EXAMINE, (2) SUBSCRIBE, (3) STATUS, (4) APPEND, (5) CHECK, (6) CLOSE, (7) EXPUNGE, (8) FETCH, (9) RENAME, (10) DELETE, (11) LIST, (12) SEARCH, (13) CREATE, or (14) UNSUBSCRIBE commands.

Productos afectados

n/a · n/a

PoCs públicas encontradas — 7✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/1159 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/4316 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/3561 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/668 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/670 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/663 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16484

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

Referencias

http://home.kabelfoon.nl/~jaabogae/han/m_401b.html http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/029701.html http://marc.info/?l=bugtraq&m=110193702909991&w=2 http://secunia.com/advisories/13348 https://exchange.xforce.ibmcloud.com/vulnerabilities/18318 http://www.osvdb.org/12508 http://www.securityfocus.com/bid/11775