Ipswitch Imail Server SMTP HELO Argument Buffer Overflow Vulnerability

Bugtraq ID:	8621
Class:	Boundary Condition Error
CVE:	CVE-1999-0284
Remote:	Yes
Local:	No
Published:	Mar 10 1998 12:00AM
Updated:	Jul 11 2009 11:56PM
Credit:	Discovery of this vulnerability has been credited to rootshell.com.
Vulnerable:	Ipswitch IMail 5.0 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0
Not Vulnerable:

Ipswitch Imail Server SMTP HELO Argument Buffer Overflow Vulnerability

It has been reported that Ipswitch IMail server is prone to an SMTP HELO command argument buffer overflow vulnerability.

The issue presents itself likely due to insufficient bounds checking performed when handling malicious SMTP HELO command arguments of excessive length. It has been reported that a remote attacker may exploit this condition to trigger a denial of service in the affected daemon.

Ipswitch Imail Server SMTP HELO Argument Buffer Overflow Vulnerability

The following proof of concept has been supplied:

• /data/vulnerabilities/exploits/heloexpl.c

Ipswitch Imail Server SMTP HELO Argument Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Ipswitch Imail Server SMTP HELO Argument Buffer Overflow Vulnerability

References:

• IMail Home Page (Ipswitch)