QwikSec

Security Database

CVE

CWE

Training

CVE-2007-5466

Published: Oct 15, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple buffer overflows in eXtremail 2.1.1 and earlier allow remote attackers to (1) have an unknown impact by sending multiple long strings to the IMAP port (143/tcp); (2) execute arbitrary code via a long string in an IMAP AUTHENTICATE PLAIN action, involving the ifParseAuthPlain function; (3) execute arbitrary code via a long LOGIN command to the admin interface port (4501/tcp); or (4) execute arbitrary code via a long string in an IMAP AUTHENTICATE LOGIN (aka CRAM-MD5 authentication) action, involving the ifProcImapAuth1 function.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.digit-labs.org/files/exploits/extremail-v4.c

x_refsource_MISC

exploit

x_refsource_EXPLOIT-DB

third-party-advisory

x_refsource_SECUNIA

exploit

x_refsource_EXPLOIT-DB

exploit

x_refsource_EXPLOIT-DB

vdb-entry

x_refsource_BID

http://www.digit-labs.org/files/exploits/extremail-v5.c

x_refsource_MISC

http://www.digit-labs.org/files/exploits/extremail-v8.pl

x_refsource_MISC

extremail-crammd5-bo(37209)

vdb-entry

x_refsource_XF

http://www.digit-labs.org/files/exploits/extremail-v6.c

x_refsource_MISC

20071015 eXtremail(ly easy) remote roots

mailing-list

x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.