Description
Stack-based buffer overflow in pop3d in Cyrus IMAPD (cyrus-imapd) 2.3.2, when the popsubfolders option is enabled, allows remote attackers to execute arbitrary code via a long USER command.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
Cyrus IMAPD pop3d popsubfolders USER Buffer Overflow
exploit/linux/pop3/cyrus_pop3d_popsubfolders
Exploit-DB 3
- Cyrus IMAPD - pop3d popsubfolders USER Buffer Overflow (Metasploit) EDB-16836 · remote · Apr 30, 2010 · verified
- Cyrus IMAPD 2.3.2 - 'pop3d' Remote Buffer Overflow (3) EDB-2185 · remote · Aug 14, 2006 · verified
- Cyrus IMAPD 2.3.2 - 'pop3d' Remote Buffer Overflow (1) EDB-1813 · remote · May 21, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 18056 vdb-entry
- cyrus-imap-pop3d-bo(26578) vdb-entry
- 1016131 vdb-entry
- 20060521 Cyrus IMAPD pop3d remote compromise aka cyrusFUCK3d mailing-list
- ADV-2006-1891 vdb-entry