CVE-2018-6789 PoC — Exim SMTP listener 缓冲区错误漏洞

Source

https://github.com/synacktiv/Exim-CVE-2018-6789

Associated Vulnerability

Title:Exim SMTP listener 缓冲区错误漏洞 (CVE-2018-6789)
Description:An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to execute code remotely.

Description

PoC materials to exploit CVE-2018-6789

Readme

Exim CVE-2018-6789
==================

PoC materials to exploit CVE-2018-6789. Blogpost explaining the PoC is
available on
[Synacktiv Blog](https://www.synacktiv.com/posts/exploit/scraps-of-notes-on-exploiting-exim-vulnerabilities.html).

This PoC connects to a vulnerable Exim server and exploits CVE-2018-6789.

Usage
-----

```
usage: exploit [-hv] <host> <port> <acl_pointer>

options:
    -h, --help        Print this help
    -v, --verbose     Enable verbose output
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!