Alt-N MDaemon IMAP Server Folder Creation Buffer Overflow Vulnerability

Bugtraq ID:	7446
Class:	Boundary Condition Error
CVE:	CVE-2003-1470
Remote:	Yes
Local:	No
Published:	Apr 26 2003 12:00AM
Updated:	Mar 19 2015 08:41AM
Credit:	Discovery of this vulnerability credited to D4rkGr3y <[email protected]>.
Vulnerable:	Altn MDaemon 6.7.9 Altn MDaemon 6.7.5
Not Vulnerable:

Alt-N MDaemon IMAP Server Folder Creation Buffer Overflow Vulnerability

A buffer overflow vulnerability has been reported for the MDaemon IMAP server. The vulnerability exists when IMAP folders are created which may result in the execution of code with elevated privileges.

Alt-N MDaemon IMAP Server Folder Creation Buffer Overflow Vulnerability

CORE has developed a working commercial exploit for their IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

Alt-N MDaemon IMAP Server Folder Creation Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Alt-N MDaemon IMAP Server Folder Creation Buffer Overflow Vulnerability

References:

• Alt-N Homepage (Alt-N)
  
• MDaemon IMAP exploit (CORE Security)
  
• MDaemon SMTP/POP/IMAP server =>v.6.7.5: IMAP buffer overflow (D4rkGr3y )