Vulnerability Details : CVE-2008-1358
Public exploit exists!
Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote authenticated users to execute arbitrary code via a FETCH command with a long BODY.
Vulnerability category: OverflowExecute code
Products affected by CVE-2008-1358
- cpe:2.3:a:altn:mdaemon:9.6.4:*:*:*:*:*:*:*
Threat overview for CVE-2008-1358
Top countries where our scanners detected CVE-2008-1358
Top open port discovered on systems with this issue
110
IPs affected by CVE-2008-1358 49
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2008-1358!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2008-1358
18.35%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 96 %
Percentile, the proportion of vulnerabilities that are scored at or less
Metasploit modules for CVE-2008-1358
-
MDaemon 9.6.4 IMAPD FETCH Buffer Overflow
Disclosure Date: 2008-03-13First seen: 2020-04-26exploit/windows/imap/mdaemon_fetchThis module exploits a stack buffer overflow in the Alt-N MDaemon IMAP Server version 9.6.4 by sending an overly long FETCH BODY command. Valid IMAP account credentials are required. Credit to Matteo Memelli Authors: - Jacopo Cervini - aushack <patrick@osisecuri
CVSS scores for CVE-2008-1358
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.5
|
MEDIUM | AV:N/AC:L/Au:S/C:P/I:P/A:P |
8.0
|
6.4
|
NIST |
CWE ids for CVE-2008-1358
-
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.Assigned by: nvd@nist.gov (Primary)
References for CVE-2008-1358
-
http://www.vupen.com/english/advisories/2008/0877/references
Vendor Advisory
-
http://files.altn.com/MDaemon/Release/RelNotes_en.txt
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/41195
-
http://www.securityfocus.com/bid/28245
Alt-N MDaemon IMAP Server FETCH Command Remote Buffer Overflow Vulnerability
-
https://www.exploit-db.com/exploits/5248
Alt-N MDaemon IMAP server 9.6.4 - 'FETCH' Remote Buffer Overflow - Windows remote Exploit
-
http://www.securitytracker.com/id?1019615
-
http://www.be4mind.com/?q=node/256
Jump to