L-Soft Listserv SMTP Buffer Overflow Vulnerability
BID:6790
Info
L-Soft Listserv SMTP Buffer Overflow Vulnerability
| Bugtraq ID: | 6790 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 20 1997 12:00AM |
| Updated: | Jun 20 1997 12:00AM |
| Credit: | Discovery of this vulnerablity has been credited to: PLaGuEZ <[email protected]> |
| Vulnerable: |
L-Soft Listserv 1.8 c |
| Not Vulnerable: | |
Discussion
L-Soft Listserv SMTP Buffer Overflow Vulnerability
A buffer overrun vulnerability has been discovered in Listserv. The issue occurs when excessive data is supplied through the first,second or third argument of an 'add' command, which may be embedded in an email body. This issue occurs due to insufficient bounds checking on user-supplied input.
By exploiting this issue to overwrite an instruction pointer an attacker may gain the ability to execute arbitrary instructions. As Listserv is typically installed setgid 'mail', all commands executed by the attacker will be run with the group privileges of 'mail'.
A buffer overrun vulnerability has been discovered in Listserv. The issue occurs when excessive data is supplied through the first,second or third argument of an 'add' command, which may be embedded in an email body. This issue occurs due to insufficient bounds checking on user-supplied input.
By exploiting this issue to overwrite an instruction pointer an attacker may gain the ability to execute arbitrary instructions. As Listserv is typically installed setgid 'mail', all commands executed by the attacker will be run with the group privileges of 'mail'.
Exploit / POC
L-Soft Listserv SMTP Buffer Overflow Vulnerability
The following proof of concept was provided by PLaGuEZ <[email protected]>. Further details are available in the referenced message.
The following proof of concept was provided by PLaGuEZ <[email protected]>. Further details are available in the referenced message.
Solution / Fix
L-Soft Listserv SMTP Buffer Overflow Vulnerability
Solution:
The vendor has recommended that all users of legacy L-Soft Listserv software update to the current version.
Solution:
The vendor has recommended that all users of legacy L-Soft Listserv software update to the current version.
References
L-Soft Listserv SMTP Buffer Overflow Vulnerability
References:
References:
- Listserv buffer overflow (PLaGuEZ
- Listserv Product Home Page (L-Soft)