Alt-N MDaemon IMAP Server FETCH Command Remote Buffer Overflow Vulnerability

Bugtraq ID:	28245
Class:	Boundary Condition Error
CVE:	CVE-2008-1358
Remote:	Yes
Local:	No
Published:	Mar 13 2008 12:00AM
Updated:	Apr 16 2015 06:05PM
Credit:	Matteo Memelli aka ryujin discovered this issue.
Vulnerable:	Alt-N MDaemon 9.64
Not Vulnerable:	Alt-N MDaemon 9.65

Alt-N MDaemon IMAP Server FETCH Command Remote Buffer Overflow Vulnerability

Alt-N MDaemon IMAP Server is affected by a remote buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data before copying it into an insufficiently sized buffer.

Attackers may leverage this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will completely compromise affected computers.

Alt-N MDaemon 9.64 is vulnerable; other versions may also be affected.

Alt-N MDaemon IMAP Server FETCH Command Remote Buffer Overflow Vulnerability

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

The following exploit code is available:

• /data/vulnerabilities/exploits/28245.py

Alt-N MDaemon IMAP Server FETCH Command Remote Buffer Overflow Vulnerability

Solution:
The vendor has addressed this issue in MDaemon 9.65. Contact the vendor for details on obtaining and applying the appropriate update.

Alt-N MDaemon IMAP Server FETCH Command Remote Buffer Overflow Vulnerability

References:

• Alt-N Homepage (Alt-N)
  
• MDaemon Release Notes (Alt-N)