vendor:
SPA-PRO Mail
by:
Unknown
7.5
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: SPA-PRO Mail
Affected Version From: 04.01
Affected Version To: 04.01
Patch Exists: NO
Related CWE:
CPE: a:solomon:spa-pro_mail:4.01
Platforms Tested: Windows
2005
e-Post SPA-PRO Mail @Solomon SPA-IMAP4S 4.01 Service Buffer Overflow Vulnerability
This POC code binds shell on port 2001 of a vulnerable e-Post SPA-PRO Mail @Solomon IMAP server. It assumes default mailbox configuration C:mailinbox%USERNAME%. Any changes to the mailbox configuration will cause this POC to fail due to the length differences.
Mitigation:
Apply the relevant patch or upgrade to a non-vulnerable version of the software.
