IceWarp Merak Mail Server XStat Unspecified Vulnerability

Bugtraq ID:	12165
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 21 2001 12:00AM
Updated:	Nov 21 2001 12:00AM
Credit:	This vulnerability was announced by the vendor.
Vulnerable:	IceWarp Merak Mail Server 4.1 0.040 IceWarp Merak Mail Server 4.0 0.30
Not Vulnerable:	IceWarp Merak Mail Server 4.1 0.050

IceWarp Merak Mail Server XStat Unspecified Vulnerability

IceWarp Merak Mail is reportedly affected by a vulnerability with the XSTAT text command.

The vendor has reported very little information on this issue other than to state it has been addressed in IceWarp Merak Mail Server 4.10.050 by removing the affected command.

IceWarp Merak Mail Server XStat Unspecified Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

IceWarp Merak Mail Server XStat Unspecified Vulnerability

Solution:
The vendor has addressed this issue in IceWarp Merak Mail Server 4.10.050 and later.


IceWarp Merak Mail Server 4.0 0.30

• IceWarp Merak Mail Server Latest Downloadable Version
  http://www.icewarp.com/download/merak.zip

IceWarp Merak Mail Server 4.1 0.040

• IceWarp Merak Mail Server Latest Downloadable Version
  http://www.icewarp.com/download/merak.zip

IceWarp Merak Mail Server XStat Unspecified Vulnerability

References:

• Merak Mail Server for Windows 2003/2K/XP/NT/9x/ME Release notes. (IceWarp)
  
• Merak Mail Server Homepage (IceWarp)