Tabs Laboratories MailCarrier Remote SMTP EHLO/HELO Buffer Overflow

Bugtraq ID:	11535
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 26 2004 12:00AM
Updated:	Oct 26 2004 12:00AM
Credit:	The discovery of this issue is credited to muts.
Vulnerable:	Tabs Laboratories MailCarrier 2.51
Not Vulnerable:

Tabs Laboratories MailCarrier Remote SMTP EHLO/HELO Buffer Overflow

Tabs Laboratories MailCarrier is affected by a remote SMTP EHLO/HELO buffer overflow vulnerability. This issue is due to a failure of the application to perform adequate bounds checking on network messages prior to copying them into process buffers.

A remote attacker may leverage this issue to execute arbitrary code on a computer running the affected software. This will facilitate unauthorized access and privilege escalation.

Tabs Laboratories MailCarrier Remote SMTP EHLO/HELO Buffer Overflow

The following exploit has been provided:

• /data/vulnerabilities/exploits/mailCarrierExploit.txt

Tabs Laboratories MailCarrier Remote SMTP EHLO/HELO Buffer Overflow

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Tabs Laboratories MailCarrier Remote SMTP EHLO/HELO Buffer Overflow

References:

• MailCarrier Home Page (Tabs Laboratories)
  
• MailCarrier 2.51 SMTP server Buffer Overflow [PoC included] ("Jérôme" ATHIAS )