Paul L Daniels alterMIME Denial of Service Vulnerability
BID:4650
Info
Paul L Daniels alterMIME Denial of Service Vulnerability
| Bugtraq ID: | 4650 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 26 2002 12:00AM |
| Updated: | Apr 26 2002 12:00AM |
| Credit: | Published in the alterMIME changelog. |
| Vulnerable: |
Paul L Daniels alterMIME 0.1.11 Paul L Daniels alterMIME 0.1.10 |
| Not Vulnerable: |
Paul L Daniels alterMIME 0.1.12 |
Discussion
Paul L Daniels alterMIME Denial of Service Vulnerability
Paul L Daniels alterMIME is a program to help modify MIME encoded email packages, including the ability to modify attachments and append text to outgoing email.
A possible denial of service issue exists in some versions of alterMIME. Under some circumstances, an unsafe call to snprintf() results in an out by one error. This may cause the process to crash, and result in a denial of service condition.
Paul L Daniels alterMIME is a program to help modify MIME encoded email packages, including the ability to modify attachments and append text to outgoing email.
A possible denial of service issue exists in some versions of alterMIME. Under some circumstances, an unsafe call to snprintf() results in an out by one error. This may cause the process to crash, and result in a denial of service condition.
Exploit / POC
Paul L Daniels alterMIME Denial of Service Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Paul L Daniels alterMIME Denial of Service Vulnerability
References:
References:
- alterMIME Homepage (Paul L Daniels)