Alt-N MDaemon IMAP Server CREATE Remote Buffer Overflow Vulnerability

Bugtraq ID:	14315
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 19 2005 12:00AM
Updated:	Jul 19 2005 12:00AM
Credit:	Discovery is credited to kcope <[email protected]>.
Vulnerable:	Alt-N MDaemon 8.0 3 Alt-N MDaemon 8.0 2 Alt-N MDaemon 8.0 1 Alt-N MDaemon 8.0
Not Vulnerable:

Alt-N MDaemon IMAP Server CREATE Remote Buffer Overflow Vulnerability

Alt-N MDaemon IMAP Server is affected by a remote buffer overflow vulnerability.

This issue presents itself when an attacker submits excessive data through the CREATE command subsequent to authentication

This vulnerability may be leveraged to execute arbitrary code in the context of the server, facilitating unauthorized access to the affected computer.

Alt-N MDaemon 8.03 is reported to be vulnerable. Other versions are likely affected as well.

Alt-N MDaemon IMAP Server CREATE Remote Buffer Overflow Vulnerability

A proof of concept is available.

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

• /data/vulnerabilities/exploits/MDAEMON_CREATE_bof.pl

Alt-N MDaemon IMAP Server CREATE Remote Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Alt-N MDaemon IMAP Server CREATE Remote Buffer Overflow Vulnerability

References:

• Alt-N Homepage (Alt-N)