Kerio MailServer Remote Username Buffer Overrun Vulnerabilities
BID:7967
Info
Kerio MailServer Remote Username Buffer Overrun Vulnerabilities
| Bugtraq ID: | 7967 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2003-0487 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 18 2003 12:00AM |
| Updated: | Jul 11 2009 10:06PM |
| Credit: | This vulnerability was reported by "David F.Madrid" <[email protected]>. |
| Vulnerable: |
Kerio Mailserver 5.6.3 |
| Not Vulnerable: |
Kerio Mailserver 5.6.4 |
Discussion
Kerio MailServer Remote Username Buffer Overrun Vulnerabilities
Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs due to insufficient bounds checking. Due to the similarity of these issues it has been conjectured that the root of the problem may be a single function used to handle all affected procedures.
Successful exploitation of this vulnerability could potentially result in the execution of arbitrary code, with the privileges of the Kerio MailServer process.
Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs due to insufficient bounds checking. Due to the similarity of these issues it has been conjectured that the root of the problem may be a single function used to handle all affected procedures.
Successful exploitation of this vulnerability could potentially result in the execution of arbitrary code, with the privileges of the Kerio MailServer process.