Youngzsoft CMailServer Multiple Remote Vulnerabilities
BID:11742
Info
Youngzsoft CMailServer Multiple Remote Vulnerabilities
| Bugtraq ID: | 11742 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 24 2004 12:00AM |
| Updated: | Nov 24 2004 12:00AM |
| Credit: | Disclosure of this issue is credited to <[email protected]>. |
| Vulnerable: |
YoungZSoft CMailServer 5.2.0 |
| Not Vulnerable: |
YoungZSoft CMailServer 5.2.1 |
Discussion
Youngzsoft CMailServer Multiple Remote Vulnerabilities
Multiple remote vulnerabilities affect the Youngzsoft CMailServer. These issues are due to a failure of the application to properly sanitize user input and perform sufficient bounds checking.
The first issue is a buffer overflow vulnerability in the attachment functionality. The second and third issues are SQL injection vulnerabilities. The final issue is an HTML injection issue.
An attacker may leverage these issues to execute arbitrary code on an affected computer, carry out SQL injection attacks that may delete sensitive data and perform HTML injection attacks facilitating the theft of authentication credentials.
Multiple remote vulnerabilities affect the Youngzsoft CMailServer. These issues are due to a failure of the application to properly sanitize user input and perform sufficient bounds checking.
The first issue is a buffer overflow vulnerability in the attachment functionality. The second and third issues are SQL injection vulnerabilities. The final issue is an HTML injection issue.
An attacker may leverage these issues to execute arbitrary code on an affected computer, carry out SQL injection attacks that may delete sensitive data and perform HTML injection attacks facilitating the theft of authentication credentials.
Exploit / POC
Youngzsoft CMailServer Multiple Remote Vulnerabilities
Currently we are not aware of any exploits for these issues. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for these issues. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Youngzsoft CMailServer Multiple Remote Vulnerabilities
Solution:
The vendor has released an upgrade dealing with this issue. Users are advised to contact the vendor to obtain the upgrade.
Solution:
The vendor has released an upgrade dealing with this issue. Users are advised to contact the vendor to obtain the upgrade.
References
Youngzsoft CMailServer Multiple Remote Vulnerabilities
References:
References: