Cyrus IMSP Daemon Remote Buffer Overflow Vulnerability

Bugtraq ID:	9227
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 15 2003 12:00AM
Updated:	Mar 19 2015 08:30AM
Credit:	Discovery credited to Felix Lindner and Michael Guenther.
Vulnerable:	Cmu Cyrus IMSP Daemon 1.7 Cmu Cyrus IMSP Daemon 1.6 a3 Cmu Cyrus IMSP Daemon 1.5 a6 Cmu Cyrus IMSP Daemon 1.4
Not Vulnerable:	Cmu Cyrus IMSP Daemon 1.7 a Cmu Cyrus IMSP Daemon 1.6 a4

Cyrus IMSP Daemon Remote Buffer Overflow Vulnerability

A problem has been identified in the Cyrus IMSP Daemon implementation when handling certain types of requests. Because of this, it may be possible for a remote attacker to gain unauthorized access to a system using the vulnerable software.

Cyrus IMSP Daemon Remote Buffer Overflow Vulnerability

Exploits contributed by SpikE.

• /data/vulnerabilities/exploits/SPK-IMSPd.c
• /data/vulnerabilities/exploits/SpikECyrusIMSPdConnectBackExploit.c

Cyrus IMSP Daemon Remote Buffer Overflow Vulnerability

Solution:
It has been reported that this issue has been resolved in versions 1.6a4 and 1.7a. This has not been confirmed by the vendor or Symantec.
-----
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Cyrus IMSP Daemon Remote Buffer Overflow Vulnerability

References:

• Cyrus Project Homepage (Carnegie Mellon University)
  
• IMSP -- Internet Message Support Protocol (Carnegie Mellon University)
  
• Cyrus IMSP remote root vulnerability (Felix Lindner )