IMail POP3 Buffer Overflow Denial of Service Vulnerability

Bugtraq ID:	789
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	Unknown
Published:	Nov 08 1999 12:00AM
Updated:	Nov 08 1999 12:00AM
Credit:	This vulnerability was posted to Bugtraq by Shok <[email protected]>.
Vulnerable:	Ipswitch IMail 5.0.7 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 + Microsoft Windows NT 4.0 Ipswitch IMail 5.0.6 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 + Microsoft Windows NT 4.0 Ipswitch IMail 5.0.5 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 + Microsoft Windows NT 4.0
Not Vulnerable:

IMail POP3 Buffer Overflow Denial of Service Vulnerability

There is a buffer overflow in the username field when the username is between 200 and 500 characters. Although it may be possible to execute arbitrary code on the vulnerable server, current exploits only cause a denial of service on the remote machine.

IMail POP3 Buffer Overflow Denial of Service Vulnerability

Exploit available:

• /data/vulnerabilities/exploits/imailpopx.c

IMail POP3 Buffer Overflow Denial of Service Vulnerability

Solution:
Ipswitch has posted a patch on their site. It is available at:

ftp://ftp.ipswitch.com/Ipswitch/Product_Support/IMail/imail508.exe

IMail POP3 Buffer Overflow Denial of Service Vulnerability

References: