PSCS VPOP3 Email Server Remote Denial of Service Vulnerability

Bugtraq ID:	10782
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jul 22 2004 12:00AM
Updated:	Jul 22 2004 12:00AM
Credit:	Discovery is credited to dr_insane and papabfs.
Vulnerable:	PSCS VPOP3 2.0 k
Not Vulnerable:	PSCS VPOP3 2.1 .0b

PSCS VPOP3 Email Server Remote Denial of Service Vulnerability

It is reported that VPOP3 is reported prone to a remote denial of service vulnerability. This issue presents itself when an attacker issues a URI request containing a large value for the 'msglistlen' parameter to the web mail interface.

VPOP3 2.0.0k is reported prone to this issue, however, it is likely that other versions are affected as well.

PSCS VPOP3 Email Server Remote Denial of Service Vulnerability

No exploit is required.

The following proof of concept is available:
http://www.example.com:5108/messagelist.html?auth=MDA4MDA2MTQ6MTI3LjAuMC4xOmRpbWl0cmlz&msgliststart=0&msglistlen=10&sortfield=date&sortorder=A

PSCS VPOP3 Email Server Remote Denial of Service Vulnerability

Solution:
The vendor has released version 2.1.0b to address this issue:


PSCS VPOP3 2.0 k

• PSCS VPOP3 Latest Version Download Page
  http://www.pscs.co.uk/downloads/vpop3.php

PSCS VPOP3 Email Server Remote Denial of Service Vulnerability

References:

• VPOP3 2.0.0k Denial of Service attack [ BufferOverflow] (papabfs)
  
• VPOP3 Homepage (PSCS)
  
• VPOP3 Revision History (PSCS)