NetCPlus BusinessMail Multiple Remote Buffer Overflow Vulnerabilities

Bugtraq ID:	14434
Class:	Boundary Condition Error
CVE:	CVE-2005-2472
Remote:	Yes
Local:	No
Published:	Jul 31 2005 12:00AM
Updated:	Jun 04 2007 08:50PM
Credit:	Discovery is credited to Reed Arvin <[email protected]>.
Vulnerable:	NetcPlus BusinessMail 4.60
Not Vulnerable:	NetcPlus BusinessMail 4.70

NetCPlus BusinessMail Multiple Remote Buffer Overflow Vulnerabilities

BusinessMail is affected by multiple remote buffer-overflow vulnerabilities because the software fails to perform boundary checks. Remote attackers may be able to execute machine code in the context of the server process.

BusinessMail 4.60 is reportedly vulnerable; other versions may be affected as well.

NetCPlus BusinessMail Multiple Remote Buffer Overflow Vulnerabilities

A proof of concept is available.

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

• /data/vulnerabilities/exploits/BusinessMail_poc.pl

NetCPlus BusinessMail Multiple Remote Buffer Overflow Vulnerabilities

Solution:
The vendor reports that version 4.70 addresses this issue. Contact the vendor for more information.


NetcPlus BusinessMail 4.60

• NetcPlus bm470f.exe
  http://www.netcplus.com/pub/downloads/bm470f.exe

NetCPlus BusinessMail Multiple Remote Buffer Overflow Vulnerabilities

References:

• BusinessMail Product Page (NetcPlus)
  
• Buffer overflow in BusinessMail email server system 4.60.00 (Reed Arvin )
  
• Re: Buffer overflow in BusinessMail email server system 4.60.00 (Steve Tornio )
  
• Re: Buffer overflow in BusinessMail email server system 4.60.00 ([email protected])