• info
• discussion
• exploit
• solution
• references

GNU Mailutils Imap4D Search Command Remote Format String Vulnerability

The following search command is sufficient to trigger this issue:

SEARCH TOPIC %s%s%s

Exploit code is available.

• /data/vulnerabilities/exploits/imap4d_search_expl.c
• /data/vulnerabilities/exploits/imap4d_FreeBSD_exploit.c
• /data/vulnerabilities/exploits/14794.c