NJStar Communicator 3.00 MiniSMTP Buffer Overflow

This module exploits a stack buffer overflow vulnerability in NJStar Communicator Version 3.00 MiniSMTP server. The MiniSMTP application can be seen in multiple NJStar products, and will continue to run in the background even if the software is already shutdown. According to the vendor's testimonials, NJStar software is also used by well known companies such as Siemens, NEC, Google, Yahoo, eBay; government agencies such as the FBI, Department of Justice (HK); as well as a long list of universities such as Yale, Harvard, University of Tokyo, etc.

Search Other Modules

Exploit Rank

• Normal

Exploit Authors

• Dillon Beresford < >

Vulnerability References

• OSVDB-76728
• http://www.njstar.com/cms/njstar-communicator
• EDB-18057

Exploit Targets

• 0 - Windows XP SP2/SP3 (default)
• 1 - Windows Server 2003 SP0
• 2 - Windows Server 2003 SP1/SP2

Exploit Development

• Source Code
• History

Similar Exploit Modules

• exploit/windows/smtp/mailcarrier_smtp_ehlo
• exploit/windows/smtp/mercury_cram_md5
• exploit/windows/smtp/ms03_046_exchange2000_xexch50
• exploit/windows/smtp/wmailserver
• exploit/windows/smtp/ypops_overflow1

Exploit Usage Information

Exploit Module Options