BID:4055

Delegate POP Proxy USER Buffer Overflow Vulnerability

Info

Delegate POP Proxy USER Buffer Overflow Vulnerability

Bugtraq ID:	4055
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 07 2002 12:00AM
Updated:	Feb 07 2002 12:00AM
Credit:	Discovered by Tom Parker (Global InterSec LLC).
Vulnerable:	DeleGate DeleGate 7.8.1 DeleGate DeleGate 7.8 .0 - FreeBSD FreeBSD 5.0 - HP HP-UX 11.20 - IBM AIX 4.3.3 - Microsoft Windows 2000 Professional SP3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - OpenBSD OpenBSD 2.9 - OpenBSD OpenBSD 3.0 - Sun Solaris 8_sparc - Sun Solaris 7.0 - Sun Solaris 2.6 DeleGate DeleGate 7.7.1 - FreeBSD FreeBSD 5.0 - HP HP-UX 11.20 - IBM AIX 4.3.3 - Microsoft Windows 2000 Professional SP3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - OpenBSD OpenBSD 2.9 - OpenBSD OpenBSD 3.0 - Sun Solaris 8_sparc - Sun Solaris 7.0 - Sun Solaris 2.6 DeleGate DeleGate 7.7 .0 - FreeBSD FreeBSD 5.0 - HP HP-UX 11.20 - IBM AIX 4.3.3 - Microsoft Windows 2000 Professional SP3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - OpenBSD OpenBSD 2.9 - OpenBSD OpenBSD 3.0 - Sun Solaris 8_sparc - Sun Solaris 7.0 - Sun Solaris 2.6

Not Vulnerable:

Discussion

Delegate POP Proxy USER Buffer Overflow Vulnerability

DeleGate is an open source proxy server developed by Yutaka Sato. DeleGate allows for proxy of several application protocols, including POP.

Delegate is reportedly vulnerable to a stack-based buffer overflow that may allow for the execution of arbitrary code. The condition exists if the argument to the 'USER' command is of excessive length.

Additionally, several other buffer overflow conditions in DeleGate reportedly exist.

Exploit / POC

Delegate POP Proxy USER Buffer Overflow Vulnerability

It is believed that an exploit exists.

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

Delegate POP Proxy USER Buffer Overflow Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

References

Delegate POP Proxy USER Buffer Overflow Vulnerability

References:

Delegate Homepage (Yutaka Sato)