{"vulnerability": "CVE-2006-2502", "sightings": [{"uuid": "0dea2038-15f9-4929-a5dc-55f1b05589fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2006-2502", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:38.000000Z"}, {"uuid": "e0a6ebcd-59b2-4544-8957-4886f693067c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2006-2502", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:16.000000Z"}, {"uuid": "058a523e-621d-43ef-9f61-33086b53c8e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2006-2502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/pop3/cyrus_pop3d_popsubfolders.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "04ecaf50-c9c4-42ae-ad9f-245f59586be2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2006-2502", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/16836", "content": "", "creation_timestamp": "2010-04-30T00:00:00.000000Z"}, {"uuid": "29e8f619-5184-46be-8fb0-c6fd0f203783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2006-2502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/pop3/cyrus_pop3d_popsubfolders.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"bannedit \", \"jduck \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This exploit takes advantage of a stack based overflow.  Once the stack\\n          corruption has occurred it is possible to overwrite a pointer which is\\n          later used for a memcpy. This gives us a write anything anywhere condition\\n          similar to a format string vulnerability.\\n\\n          NOTE: The popsubfolders option is a non-default setting.\\n\\n          I chose to overwrite the GOT with my shellcode and return to it. This\\n          defeats the VA random patch and possibly other stack protection features.\\n\\n          Tested on gentoo-sources Linux 2.6.16. Although Fedora CORE 5 ships with\\n          a version containing the vulnerable code, it is not exploitable due to the\\n          use of the FORTIFY_SOURCE compiler enhancement.\", \"disclosure_date\": \"2006-05-21\", \"fullname\": \"exploit/linux/pop3/cyrus_pop3d_popsubfolders\", \"is_install_path\": true, \"mod_time\": \"2025-05-21 02:19:09 +0000\", \"name\": \"Cyrus IMAPD pop3d popsubfolders USER Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unreliable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-service-down\"]}, \"path\": \"/modules/exploits/linux/pop3/cyrus_pop3d_popsubfolders.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"linux/pop3/cyrus_pop3d_popsubfolders\", \"references\": [\"CVE-2006-2502\", \"OSVDB-25853\", \"BID-18056\", \"EDB-2053\", \"EDB-2185\", \"URL-http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0527.html\"], \"rport\": 110, \"session_types\": false, \"targets\": [\"Gentoo 2006.0 Linux 2.6\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:21.065876Z"}]}