MailEnable Email Server Buffer Overflow Vulnerability

Bugtraq ID:	6197
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 18 2002 12:00AM
Updated:	Nov 18 2002 12:00AM
Credit:	Discovery of this vulnerability credited to Ketil Braun Larsen <[email protected]>.
Vulnerable:	MailEnable MailEnable 1.5018 MailEnable MailEnable 1.5017 MailEnable MailEnable 1.5016 MailEnable MailEnable 1.5015
Not Vulnerable:	MailEnable MailEnable 1.610

MailEnable Email Server Buffer Overflow Vulnerability

A buffer overflow vulnerability has been reported for MailEnable's POP3 server. The vulnerability is due to insufficent bounds checking of the USER login field.

An attacker can exploit this vulnerability by connecting to a vulnerable MailEnable server and sending an overly long string as the value for the USER login prompt. This will trigger the buffer overflow condition.

MailEnable Email Server Buffer Overflow Vulnerability

Proof of concept code has been released.

• /data/vulnerabilities/exploits/mailenable-dos.c

MailEnable Email Server Buffer Overflow Vulnerability

Solution:
Fixes available:


MailEnable MailEnable 1.5015

• MailEnable MailEnable 1.610
  http://www.mailenable.com/download.html

MailEnable MailEnable 1.5016

• MailEnable MailEnable 1.610
  http://www.mailenable.com/download.html

MailEnable MailEnable 1.5017

• MailEnable MailEnable 1.610
  http://www.mailenable.com/download.html

MailEnable MailEnable 1.5018

• MailEnable MailEnable 1.610
  http://www.mailenable.com/download.html

MailEnable Email Server Buffer Overflow Vulnerability

References:

• MailEnable Homepage (MailEnable)
  
• Remote service shutdown in mailenable (newest) (Ketil Braun Larsen )