Kinesphere Corporation Exchange POP3 Remote Buffer Overflow Vulnerability

Bugtraq ID:	10180
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 20 2004 12:00AM
Updated:	Apr 20 2004 12:00AM
Credit:	Discovery is credited to securma massine <[email protected]>.
Vulnerable:	Kinesphere Corporation eXchange POP3 5.0 Kinesphere Corporation eXchange POP3 4.0
Not Vulnerable:	Kinesphere Corporation eXchange POP3 5.0.1629

Kinesphere Corporation Exchange POP3 Remote Buffer Overflow Vulnerability

It has been reported that Exchange POP3 e-mail gateway is prone to a remote buffer overflow vulnerability that may allow an attacker to execute arbitrary code on a vulnerable system. This issue could allow an attacker to gain unauthorized access in the context of the affected process.

Kinesphere Corporation Exchange POP3 Remote Buffer Overflow Vulnerability

The following exploit code has been provided:

• /data/vulnerabilities/exploits/eXchangePOP3_exp.pl

Kinesphere Corporation Exchange POP3 Remote Buffer Overflow Vulnerability

Solution:
The vendor has released eXchange POP3 5.0.1629 to address this issue:


Kinesphere Corporation eXchange POP3 4.0

• Kinesphere Corporation eXchange POP3 5.0.1629
  http://www.exchangepop3.com/download.html

Kinesphere Corporation eXchange POP3 5.0

• Kinesphere Corporation eXchange POP3 5.0.1629
  http://www.exchangepop3.com/download.html

Kinesphere Corporation Exchange POP3 Remote Buffer Overflow Vulnerability

References:

• eXchange POP3 Homepage (Kinesphere Corporation)
  
• Exchange pop3 remote exploit ("securma massine " )