Ok, message accepted for delivery. But there are some limits. Qpopper2.53 from FreeBSD ports with patches is much more difficult to exploit than one from linux. Qpopper with FreeBSD's patches IS exploitable. This little proggie generates a mail u need to send.
Standard disclaimer applies.
MAD greets to tf8 for pointing out the bug, and all other b0f members. Im not going to post exploit for this because it is really generic, but I will explain theory on exploiting qpop with vsNprintf. Hah, first time i expected to see 1024, but YOu know that all is unpredictable . So, this little thing will help us a lot. If you need an exploit that will work on FreeBSD, code it yourself.