Magic Winmail Server USER POP3 Command Format String Vulnerability

Bugtraq ID:	7667
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	May 23 2003 12:00AM
Updated:	May 23 2003 12:00AM
Credit:	Discovery of this vulnerability credited to D4rkGr3y <[email protected]>.
Vulnerable:	AMAX Information Technologies Inc. Magic Winmail Server 2.3
Not Vulnerable:

Magic Winmail Server USER POP3 Command Format String Vulnerability

A format string vulnerability has been reported for Magic Winmail Server when processing the USER POP3 command.

An attacker may exploit this vulnerability by connecting to the vulnerable mail server and issuing the USER command with malicious format string specifiers. This may result in the corruption of sensitive memory.

Magic Winmail Server USER POP3 Command Format String Vulnerability

The following proof of concept exploit has been provided:

• /data/vulnerabilities/exploits/mwmxploit.c

Magic Winmail Server USER POP3 Command Format String Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Magic Winmail Server USER POP3 Command Format String Vulnerability

References:

• Magic Winmail Server (AMAX Information Technologies Inc.)