ArGoSoft Mail Server POP3 Server Unspecified Remote Buffer Overflow Vulnerability

Bugtraq ID:	18668
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 26 2006 12:00AM
Updated:	Jun 27 2006 05:30PM
Credit:	The original discoverer of this issue is currently unknown.
Vulnerable:	ArGoSoft Mail Server Pro 1.8.8 .6 ArGoSoft Mail Server Pro 1.8.8 .5 ArGoSoft Mail Server Pro 1.8.8 .4 ArGoSoft Mail Server Pro 1.8.8 .3 ArGoSoft Mail Server Pro 1.8.8 .1 ArGoSoft Mail Server Pro 1.8.7 .6 ArGoSoft Mail Server Pro 1.8.7 .4 ArGoSoft Mail Server Pro 1.8.7 .3 ArGoSoft Mail Server Pro 1.8.7 .1 ArGoSoft Mail Server Pro 1.8.7 .0 ArGoSoft Mail Server Pro 1.8.6 .9 ArGoSoft Mail Server Pro 1.8.6 .8 ArGoSoft Mail Server Pro 1.8.6 .7 ArGoSoft Mail Server Pro 1.8.6 .6 ArGoSoft Mail Server Pro 1.8.6 .5 ArGoSoft Mail Server Pro 1.8.6 .4 ArGoSoft Mail Server Pro 1.8.6 .3 ArGoSoft Mail Server Pro 1.8.6 .2 ArGoSoft Mail Server Pro 1.8.6 .1 ArGoSoft Mail Server Pro 1.8.1 .9 ArGoSoft Mail Server Pro 1.8.1 .8 ArGoSoft Mail Server Pro 1.8.1 .7 ArGoSoft Mail Server Pro 1.8 .1.6 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server - Microsoft Windows NT Enterprise Server 4.0 SP6a - Microsoft Windows NT Enterprise Server 4.0 SP6 - Microsoft Windows NT Enterprise Server 4.0 SP5 - Microsoft Windows NT Enterprise Server 4.0 SP4 - Microsoft Windows NT Enterprise Server 4.0 SP3 - Microsoft Windows NT Enterprise Server 4.0 SP2 - Microsoft Windows NT Enterprise Server 4.0 SP1 - Microsoft Windows NT Enterprise Server 4.0 - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP3 - Microsoft Windows NT Server 4.0 SP2 - Microsoft Windows NT Server 4.0 SP1 - Microsoft Windows NT Server 4.0 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home - Microsoft Windows XP Professional ArGoSoft Mail Server Pro 1.8 .1.5 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server - Microsoft Windows NT Enterprise Server 4.0 SP6a - Microsoft Windows NT Enterprise Server 4.0 SP6 - Microsoft Windows NT Enterprise Server 4.0 SP5 - Microsoft Windows NT Enterprise Server 4.0 SP4 - Microsoft Windows NT Enterprise Server 4.0 SP3 - Microsoft Windows NT Enterprise Server 4.0 SP2 - Microsoft Windows NT Enterprise Server 4.0 SP1 - Microsoft Windows NT Enterprise Server 4.0 - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP3 - Microsoft Windows NT Server 4.0 SP2 - Microsoft Windows NT Server 4.0 SP1 - Microsoft Windows NT Server 4.0 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home - Microsoft Windows XP Professional ArGoSoft Mail Server Pro 1.8.8.2 ArGoSoft Mail Server Plus 1.8.7 .4 ArGoSoft Mail Server Plus 1.8.7 .3 ArGoSoft Mail Server Plus 1.8.7 .1 ArGoSoft Mail Server Plus 1.8.7 .0 ArGoSoft Mail Server Plus 1.8.6 .9 ArGoSoft Mail Server Plus 1.8.6 .8 ArGoSoft Mail Server Plus 1.8.6 .7 ArGoSoft Mail Server Plus 1.8.6 .6 ArGoSoft Mail Server Plus 1.8.6 .5 ArGoSoft Mail Server Plus 1.8.6 .4 ArGoSoft Mail Server Plus 1.8.6 .3 ArGoSoft Mail Server Plus 1.8.6 .2 ArGoSoft Mail Server Plus 1.8.6 .1 ArGoSoft Mail Server Plus 1.8 .1.6 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server - Microsoft Windows NT Enterprise Server 4.0 SP6a - Microsoft Windows NT Enterprise Server 4.0 SP6 - Microsoft Windows NT Enterprise Server 4.0 SP5 - Microsoft Windows NT Enterprise Server 4.0 SP4 - Microsoft Windows NT Enterprise Server 4.0 SP3 - Microsoft Windows NT Enterprise Server 4.0 SP2 - Microsoft Windows NT Enterprise Server 4.0 SP1 - Microsoft Windows NT Enterprise Server 4.0 - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP3 - Microsoft Windows NT Server 4.0 SP2 - Microsoft Windows NT Server 4.0 SP1 - Microsoft Windows NT Server 4.0 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home - Microsoft Windows XP Professional ArGoSoft Mail Server Plus 1.8 .1.5 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server - Microsoft Windows NT Enterprise Server 4.0 SP6a - Microsoft Windows NT Enterprise Server 4.0 SP6 - Microsoft Windows NT Enterprise Server 4.0 SP5 - Microsoft Windows NT Enterprise Server 4.0 SP4 - Microsoft Windows NT Enterprise Server 4.0 SP3 - Microsoft Windows NT Enterprise Server 4.0 SP2 - Microsoft Windows NT Enterprise Server 4.0 SP1 - Microsoft Windows NT Enterprise Server 4.0 - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP3 - Microsoft Windows NT Server 4.0 SP2 - Microsoft Windows NT Server 4.0 SP1 - Microsoft Windows NT Server 4.0 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home - Microsoft Windows XP Professional ArGoSoft Mail Server FreeWare 1.8.3 .5 ArGoSoft Mail Server FreeWare 1.8.3 .4 ArGoSoft Mail Server FreeWare 1.8.2 .6 ArGoSoft Mail Server 1.8.7 .4 ArGoSoft Mail Server 1.8.7 .3 ArGoSoft Mail Server 1.8.7 .1 ArGoSoft Mail Server 1.8.7 .0 ArGoSoft Mail Server 1.8.6 .9 ArGoSoft Mail Server 1.8.6 .8 ArGoSoft Mail Server 1.8.6 .7 ArGoSoft Mail Server 1.8.6 .6 ArGoSoft Mail Server 1.8.6 .5 ArGoSoft Mail Server 1.8.6 .4 ArGoSoft Mail Server 1.8.6 .3 ArGoSoft Mail Server 1.8.6 .2 ArGoSoft Mail Server 1.8.6 .1 ArGoSoft Mail Server 1.8 .0.3 ArGoSoft Mail Server 1.8 .0.1 ArGoSoft Mail Server 1.8 .0.0 ArGoSoft Mail Server 1.7 .0.4 ArGoSoft Mail Server 1.7 .0.3 ArGoSoft Mail Server 1.7 .0.2 ArGoSoft Mail Server 1.7 .0.1 ArGoSoft Mail Server 1.7 .0.0
Not Vulnerable:

ArGoSoft Mail Server POP3 Server Unspecified Remote Buffer Overflow Vulnerability

The ArGoSoft Mail Server POP3 service is prone to a remote buffer-overflow vulnerability.

This issue allows remote attackers to execute arbitrary machine code in the context of the affected service. This service likely executes with SYSTEM-level privileges, so exploiting this issue will facilitate the complete compromise of affected computers.

More information, including affected versions, is not currently available. This BID will be updated as more information is disclosed.

ArGoSoft Mail Server POP3 Server Unspecified Remote Buffer Overflow Vulnerability

An exploit is available to members of the Immunity Partner's program from the following URI:

https://www.immunityinc.com/downloads/immpartners/argosoft_dele.py

No public exploits are currently known to be available.

ArGoSoft Mail Server POP3 Server Unspecified Remote Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected].

ArGoSoft Mail Server POP3 Server Unspecified Remote Buffer Overflow Vulnerability

References:

• Mail Server Homepage (ArGoSoft)