CORE IMPACT - Support :: The First Penetration Testing Framework

Exim sender_verify stack overflow exploit v1.10

Vulnerability exploited: CAN-2004-0399 - BID-10290/discussion/

Category: Exploits/Remote

This module exploits a stack buffer overflow bug present in the Exim SMTP daemon.
This exploit uses stack overflow vulnerability located in the sender_verify function inside the verify.c file to install a level0 agent.This issue is reported in exist in Exim 3.35. Earlier versions may also be affected.The target daemon must support mail relaying from the running agent IP and the sender_verify option must be enabled.

Supported Systems:

This module is included in the latest version of CORE IMPACT, the first automated comprehensive penetration testing product for accurately identifying information security risks. Click here to learn more about the product.