[cobalt-users] 14. RE: qpopper exploit? - script kiddie scripts

["Merlin" <merlin@xxxxxxxxxxxxxxxxxxx>]

>   14. RE: qpopper exploit? (flash22@xxxxxxx)

Below are some versions of qpop vulnerble and some names of scripts written
to take advantage of the exploits.  I.e qpop 2.53, 2.2, 2.42, 2.41  Have no
clue what version cobalt is running my pop3 gives the following version when
you connect to it.  But with all those versions having some exploit wouldn't
supprise me if a new one has been found.  I also was scanned by
oklahoma.net.

+OK QPOP (version ?)

-remote-]                   [-description-]
[-author-]

   b0f-qpop-2.53.c /   7350qpop.c / axur.c     euidl overflow
[multiple]

   irixpop.tgz / ucb.c    UCB Pop server v1.831 exploit
[multiple]

   q3combo-private.c /q3smash.c
/ qpop.pl /qpop-xploit.c / qpop3b.c     authentication overflow
[multiple]

   qpop.c / qpop-2.41beta1.c /
   qpopper-netcat.c      qpop 2.2 + 2.4+1beta remote overflow
[multiple]

   qpop242.c / bsd-qpopper.c      remote root exploit
[multiple]

   qpop-auth.c                      authentication overflow
portal

   qpop-euidl.c                      euidl overflow
portal

   qpop-list.c                       list overflow
portal

   qpop-xtnd.c                       xtnd overflow
portal

   sco-pop.c            sco pop v2.1.4-R3 remote overflow
glitch