Qualcomm Eudora Internet Mail Server For Mac OS 7 Remote Buffer Overflow Vulnerability

Bugtraq ID:	10443
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	May 31 2004 12:00AM
Updated:	May 31 2004 12:00AM
Credit:	Discovery of this vulnerability is credited to kfinisterre.
Vulnerable:	Qualcomm Eudora Internet Mail Server for Mac OS 7
Not Vulnerable:

Qualcomm Eudora Internet Mail Server For Mac OS 7 Remote Buffer Overflow Vulnerability

Qualcomm Eudora Internet Mail Server (EIMS) is reported prone to a remote heap-based buffer overrun vulnerability. The issue exists due to a lack of sufficient boundary checks performed on data that is received on port 105. A remote attacker may potentially leverage the condition to corrupt memory management structures.

This vulnerability may ultimately be exploited to execute arbitrary code in the context of the affected software, immediate consequence of an attack is likely to be a denial of service.

Qualcomm Eudora Internet Mail Server For Mac OS 7 Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Qualcomm Eudora Internet Mail Server For Mac OS 7 Remote Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Qualcomm Eudora Internet Mail Server For Mac OS 7 Remote Buffer Overflow Vulnerability

References:

• Eudora Internet Mail Server (EIMS) for Macintosh System 7 (Qualcomm)
  
• Eudora Product Homepage (Qualcomm)