CGIEmail Remote Buffer Overflow Vulnerability

Bugtraq ID:	6141
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 11 2001 12:00AM
Updated:	Sep 11 2001 12:00AM
Credit:	This vulnerability was reported in a SecurityTracker advisory.
Vulnerable:	MIT cgiemail 1.6
Not Vulnerable:

CGIEmail Remote Buffer Overflow Vulnerability

A vulnerability has been discovered in CGIEmail. It should be noted that this vulnerability exists only if the server allows queries to remote hosts.

A remotely exploitable buffer overflow has been discovered in a component included with CGIEmail. By sending a maliciously constructed GET request to the vulnerable server, it is possible for a remote attacker to overrun a buffer, potentially resulting in the execution of arbitrary system commands with the privileges of the mail server.

CGIEmail Remote Buffer Overflow Vulnerability

An exploit has been made available.

• /data/vulnerabilities/exploits/cso.c

CGIEmail Remote Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

CGIEmail Remote Buffer Overflow Vulnerability

References:

• Cgiemail Web-based E-mail Remotely Executes Arbitrary Code With the Privileges o (SecurityTracker)
  
• cgiemail web-based email system does not adequately validate user input thereby (CERT)
  
• CGIEmail's Command Execution Vulnerability (cgicso) (SecuriTeam)