If I understand it correctly the "client" sent an unencrypted password to the pop3 server consisting of a long string of As. Is this a type of attack and if yes, how does it work?
1
-
Unfortunately, questions about protocols above OSI layer-4 are off-topic here. You should ask about attacks and security on Information Security.– Ron Maupin ♦Jul 4, 2020 at 15:21
Add a comment
|
1 Answer
The attacker attempts to cause a buffer overflow, where the excessively long password is supposed to overflow out of the password buffer into adjacent memory where it's possibly executed as machine code, overwrites essential data, or is used as a stack return address.
