Tumbleweed MailGate Email Firewall Multiple LHA Buffer Overflow Vulnerabilities

Bugtraq ID:	19146
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 25 2006 12:00AM
Updated:	Jul 25 2006 10:52PM
Credit:	Ryan Smith is credited with the discovery of these vulnerabilities.
Vulnerable:	Tumbleweed MailGate Email Firewall 0
Not Vulnerable:

Tumbleweed MailGate Email Firewall Multiple LHA Buffer Overflow Vulnerabilities

Tumbleweed MailGate Email Firewall is prone to multiple buffer-overflow vulnerabilities in its LHA processing routines.

A successful attack can allow a remote attacker to corrupt process memory by triggering various overflow conditions in the LHA processing engine. This may lead to arbitrary code execution in the context of the MMSDecompose (a process of the EMF Decomposer component), resulting in a full compromise.

These vulnerabilities reportedly affect all versions of the Tumbleweed MailGate Email Firewall.

Tumbleweed MailGate Email Firewall Multiple LHA Buffer Overflow Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Tumbleweed MailGate Email Firewall Multiple LHA Buffer Overflow Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

Tumbleweed MailGate Email Firewall Multiple LHA Buffer Overflow Vulnerabilities

References:

• HustleLabs (HustleLabs)
  
• Lhaplus LHA Extended Header Handling Buffer Overflow Vulnerability (vuln.sg)
  
• Vendor Homepage (Lhaplus)