CVE-2024-24736
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
YahooPOPs是YahooPOPs公司的一个模拟 POP3/SMTP 邮件服务器并提供对 Yahoo! 的免费 POP3 和 SMTP 访问的应用程序。 YahooPOPs 1.6版本存在安全漏洞，该漏洞源于POP3 服务允许通过 110 TCP端口的长字符串进行远程拒绝服务。
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-24736
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The POP3 service in YahooPOPs (aka YPOPs!) 1.6 allows a remote denial of service (reboot) via a long string to TCP port 110, a related issue to CVE-2004-1558.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
YahooPOPs 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
YahooPOPs是YahooPOPs公司的一个模拟 POP3/SMTP 邮件服务器并提供对 Yahoo! 的免费 POP3 和 SMTP 访问的应用程序。 YahooPOPs 1.6版本存在安全漏洞，该漏洞源于POP3 服务允许通过 110 TCP端口的长字符串进行远程拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2024-24736
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-24736
请登录查看更多情报信息。
Exploits & Public PoCs for CVE-2024-24736 (1)
Same Patch Batch · n/a · 2024-01-29 · 17 CVEs total
| CVE-2024-1021 | 6.3 MEDIUM | Rebuild HTTP Request readRawText server-side request forgery |
| CVE-2024-1020 | 3.5 LOW | Rebuild proxy-download getStorageFile cross site scripting |
| CVE-2024-1018 | 2.4 LOW | PbootCMS cross site scripting |
| CVE-2024-22559 | Jianhua Sun LightCMS 跨站脚本漏洞 | |
| CVE-2024-23747 | Moderna Sistemas ModernaNet Hospital Management System 安全漏洞 | |
| CVE-2024-24135 | Product Inventory with Export to Excel 安全漏洞 | |
| CVE-2023-51839 | DeviceFarmer STF 安全漏洞 | |
| CVE-2023-51840 | DoraCMS 安全漏洞 | |
| CVE-2023-51842 | MeshCentral 安全漏洞 | |
| CVE-2024-22570 | GreenCMS 跨站脚本漏洞 | |
| CVE-2024-24134 | Sourcecodester Online Food Menu 安全漏洞 | |
| CVE-2024-24136 | Math Game with Leaderboard 安全漏洞 | |
| CVE-2024-24139 | Login System with Email Verification 安全漏洞 | |
| CVE-2024-24140 | Daily Habit Tracker 安全漏洞 | |
| CVE-2024-24141 | School Task Manager 安全漏洞 | |
| CVE-2023-49038 | Buffalo LS210D 安全漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2024-24736
No comments yet