True North Software IA EMailServer Remote Buffer Overflow Vulnerability

Bugtraq ID:	16744
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 21 2006 12:00AM
Updated:	Feb 22 2006 07:02PM
Credit:	Discovery of this issue is credited to Joao Antunes �?�[email protected]�?�.
Vulnerable:	True North Software IA eMailServer Corporate Edition 5.3.4 Build: 2019 True North Software IA eMailServer Corporate Edition 5.3.4
Not Vulnerable:

True North Software IA EMailServer Remote Buffer Overflow Vulnerability

True North Software IA eMailServer is prone to a remote buffer-overflow vulnerability. This issue is due to the application's failure to perform proper boundary checks on user-supplied data before copying it to an insufficiently sized memory buffer.

This issue allows remote attackers to execute arbitrary machine code in the context of the affected service. Failed exploitation attempts will likely crash the service.

IA eMailServer version 5.3.4 is prone to this issue; previous versions may also be affected.

True North Software IA EMailServer Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

True North Software IA EMailServer Remote Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

True North Software IA EMailServer Remote Buffer Overflow Vulnerability

References:

• True North Software Homepage (True North Software)
  
• [AJECT] TrueNorth IA eMailserver 5.3.4 buffer overflow vulnerability (Joao Antunes �?�[email protected]�?�)