Kinesphere Corporation Exchange POP3 Remote RCPT TO Buffer Overflow Vulnerability

Bugtraq ID:	16485
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 03 2006 12:00AM
Updated:	Feb 16 2006 04:22PM
Credit:	Discovery is credited to securma massine <[email protected]>.
Vulnerable:	Kinesphere Corporation eXchange POP3 5.0 Build 050203
Not Vulnerable:	Kinesphere Corporation eXchange POP3 5.0 Build 060125

Kinesphere Corporation Exchange POP3 Remote RCPT TO Buffer Overflow Vulnerability

The eXchange POP3 email gateway application is susceptible to a remote buffer-overflow vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.

This issue allows remote attackers to execute arbitrary machine code in the context of the affected service, facilitating the compromise of affected computers.

Version 5.0 build 050203 is vulnerable to this issue; other versions may also be affected.

Kinesphere Corporation Exchange POP3 Remote RCPT TO Buffer Overflow Vulnerability

A commercial available exploit has been released to the Immunity Partner's Program.

The following exploit code has been provided:

• /data/vulnerabilities/exploits/exchangepop3.pl

Kinesphere Corporation Exchange POP3 Remote RCPT TO Buffer Overflow Vulnerability

Solution:
The reporter of this issue states that eXchange POP3 5.0 build 060125 was released to address this issue. Symantec has not confirmed this. Users of affected packages should contact the vendor for further information on obtaining fixes.

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Kinesphere Corporation Exchange POP3 Remote RCPT TO Buffer Overflow Vulnerability

References:

• eXchange POP3 Homepage (Kinesphere Corporation)
  
• Exchangepop3 rcpt buffer overflow vulnerability ()