IA WebMail Server Long GET Request Buffer Overrun Vulnerability

Bugtraq ID:	8965
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 03 2003 12:00AM
Updated:	Nov 03 2003 12:00AM
Credit:	The discovery of this vulnerability has been credited to Peter Winter-Smith.
Vulnerable:	True North Software IA WebMail Server 3.1 True North Software IA WebMail Server 3.0
Not Vulnerable:

IA WebMail Server Long GET Request Buffer Overrun Vulnerability

IA WebMail Server is said to be prone to a remote buffer overrun that could allow an attacker to execute arbitrary code. The problem occurs due to insufficient bounds checking when handling GET requests. As a result, an attacker may be capable of overrunning the bounds of an internal memory buffer and effectively control the flow of execution.

IA WebMail Server Long GET Request Buffer Overrun Vulnerability

Exploit code has been made available.

Another exploit has been made available.

• /data/vulnerabilities/exploits/IA-WebMailex.pl
• /data/vulnerabilities/exploits/iawebmail.pl
• /data/vulnerabilities/exploits/ia_webmail.pm

IA WebMail Server Long GET Request Buffer Overrun Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

IA WebMail Server Long GET Request Buffer Overrun Vulnerability

References:

• IA WebMail Server (True North Software)