CVE-2019-11395 PoC — Taps Lab MailCarrier 缓冲区错误漏洞

Source

https://github.com/RedAlien00/CVE-2019-11395

Associated Vulnerability

Title:Taps Lab MailCarrier 缓冲区错误漏洞 (CVE-2019-11395)
Description:Taps Lab MailCarrier是韩国Taps Lab公司的一款基于Windows Server平台的邮件服务器。该产品支持SMTP、POP3和IMAP等协议。 Taps Lab MailCarrier 2.51版本中存在缓冲区溢出漏洞。该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。

Description

MailCarrier 2.51 - POP3 'USER' Buffer Overflow

Readme

https://www.exploit-db.com/exploits/47554

기존에 있던, Python2 버전의 코드를 Python3 형식에 맞게 수정한 버전입니다
Bad Character는 동일하게 사용하시되, Payload는 각자 환경에 맞게, msfvenom을 통해서 작성하면 됩니다 !

File Snapshot


 [4.0K]  /data/pocs/8f8efe0761e7553a93ede06c628b9aae7ea858a7
├── [2.6K]  mailserver_bof_최종본.py
└── [ 271]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!