IceWarp Merak Mail Server 'Base64FileEncode()' Stack-Based Buffer Overflow Vulnerability
BID:34739
Info
IceWarp Merak Mail Server 'Base64FileEncode()' Stack-Based Buffer Overflow Vulnerability
| Bugtraq ID: | 34739 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 27 2009 12:00AM |
| Updated: | Apr 28 2009 08:06PM |
| Credit: | Nine:Situations:Group::surfista |
| Vulnerable: |
IceWarp Merak Mail Server 9.4.1 |
| Not Vulnerable: | |
Discussion
IceWarp Merak Mail Server 'Base64FileEncode()' Stack-Based Buffer Overflow Vulnerability
IceWarp Merak Mail Server s prone to a stack-based buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.
An attacker could exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.
IceWarp Merak Mail Server 9.4.1 is vulnerable; other versions may also be affected.
IceWarp Merak Mail Server s prone to a stack-based buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.
An attacker could exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.
IceWarp Merak Mail Server 9.4.1 is vulnerable; other versions may also be affected.
Exploit / POC
IceWarp Merak Mail Server 'Base64FileEncode()' Stack-Based Buffer Overflow Vulnerability
Attackers can exploit this issue by enticing an unsuspecting user into opening a malicious file.
The following proof-of-concept code for the Merak Mail Server PHP console is available:
Attackers can exploit this issue by enticing an unsuspecting user into opening a malicious file.
The following proof-of-concept code for the Merak Mail Server PHP console is available:
Solution / Fix
IceWarp Merak Mail Server 'Base64FileEncode()' Stack-Based Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
IceWarp Merak Mail Server 'Base64FileEncode()' Stack-Based Buffer Overflow Vulnerability
References:
References:
- IceWarp Homepage (IceWarp)