602Pro Lan Suite 2003 Remote Email Message Buffer Overflow Vulnerability

Bugtraq ID:	24437
Class:	Boundary Condition Error
CVE:	CVE-2007-3203
Remote:	Yes
Local:	No
Published:	Jun 12 2007 12:00AM
Updated:	May 07 2015 05:37PM
Credit:	David Barker of Electrosonics, Inc. discovered this issue.
Vulnerable:	602 Software 602 Pro Lan Suite 2003
Not Vulnerable:	602 Software 602 Pro Lan Suite 2004

602Pro Lan Suite 2003 Remote Email Message Buffer Overflow Vulnerability

602Pro Lan Suite 2003 is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data.

Successfully exploiting this issue may allow remote attackers to execute arbitrary machine code in the context of the vulnerable application; failed exploit attempts will likely crash the application. This may facilitate the remote compromise of affected computers.

602Pro Lan Suite 2003 Remote Email Message Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

602Pro Lan Suite 2003 Remote Email Message Buffer Overflow Vulnerability

Solution:
The vendor has released a newer version of the software that is reportedly not vulnerable to this issue.

602Pro Lan Suite 2003 Remote Email Message Buffer Overflow Vulnerability

References:

• 602 Software Homepage (602 Software)
  
• Vulnerability Note VU#445313: 602pro Lan Suite 2003 buffer overflow vulnerabilit (US-CERT)