Digital Mappings Systems POP3 Server Remote Buffer Overrun Vulnerability

Bugtraq ID:	11705
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 18 2004 12:00AM
Updated:	Nov 18 2004 12:00AM
Credit:	Discovery of this vulnerability is credited to Reed Arvin <[email protected]>.
Vulnerable:	Digital Mappings Systems POP3 server 1.5.3 build 37
Not Vulnerable:

Digital Mappings Systems POP3 Server Remote Buffer Overrun Vulnerability

It is reported that a boundary condition error exists in the Digital Mappings Systems POP3 server. A remote attacker sending a username of excessive length during the authentication process to the POP3 server may cause a buffer overrun that could result in execution of malicious instructions and system compromise.

This vulnerability could result in a remote attacker gaining unauthorized access to a vulnerable host with the POP3 server process privileges.

Digital Mappings Systems POP3 Server Remote Buffer Overrun Vulnerability

The following exploits is available:

• /data/vulnerabilities/exploits/DMS_POP3_Overflow.pl
• /data/vulnerabilities/exploits/dmsPOP3BufferOverflowExpNoPh0Bia.c

Digital Mappings Systems POP3 Server Remote Buffer Overrun Vulnerability

Solution:
The vendor has supplied an update to address this issue:


Digital Mappings Systems POP3 server 1.5.3 build 37

• Digital Mappings Systems FixPOP3.exe
  http://landsur.sasktelwebsite.net/FixPOP3.exe

Digital Mappings Systems POP3 Server Remote Buffer Overrun Vulnerability

References:

• A overflow problem has been identified in the POP3 Service version 1.5.3.27 and (Digital Mappings Systems)
  
• DMS POP3 Server Homepage (Digital Mappings Systems)
  
• Buffer overlow in DMS POP3 Server for Windows 2000/XP 1.5.3 build 37 and prior v (Reed Arvin )