QPC's QVT/NET Internet Utilities Allow Remote Users to Crash the Mail Server
|
|
SecurityTracker Alert ID: 1001315 |
|
SecurityTracker URL: http://securitytracker.com/id/1001315
|
|
CVE Reference:
GENERIC-MAP-NOMATCH
(Links to External Site)
|
Date: Apr 16 2001
|
Impact:
Denial of service via network
|
Exploit Included: Yes
|
Version(s): QVT/NET Popd 4.20; possibly others
|
Description:
Strumpf Noir Society released an advisory for QPC's QVT/NET suite of Internet utilities. The mail server componenet of QVT/NET contains a buffer overflow that allows remote users to crash the server.
The vulnerability is reported to exist in QPC's pop3 mailserver. The pop daemon contains an unchecked buffer in the logon function. When a username or password of 584 bytes or more is passed to the server, the buffer will overflow and trigger an access violation, after which the server crashes.
The vendor has reportedly been notified.
This was tested against QVT/Net Popd 4.20 coming with the QVT/Net 5.0 suite, running on Microsoft Windows 2000.
|
Impact:
A remote user can cause the server to crash.
|
Solution:
No solution was available at the time of this entry.
|
Vendor URL: www.qpc.com/ (Links to External Site)
|
Cause:
Boundary error
|
Underlying OS:
Windows (Me), Windows (NT), Windows (95), Windows (98), Windows (2000)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Fri, 13 Apr 2001 21:12:23 +0200
Subject: QPC POPd Buffer Overflow Vulnerability
|
Strumpf Noir Society Advisories
! Public release !
<--#
-= QPC POPd Buffer Overflow Vulnerability =-
Release date: Saturday, April 14, 2001
Introduction:
QPC's popd is the pop3 mailserver component of the company's
QVT/NET product line for MS Windows.
The popd and the rest of the QVT/Net product line is available
from vendor QPC's website: http://www.qpc.com
Problem(s):
The pop daemon that ships with the QVT/NET software suite contains
an unchecked buffer in the logon function. When a username or
password of 584 bytes or more gets fed to the server the buffer
will overflow and will trigger an access violation, after which
the server dies.
(..)
Solution:
Vendor QPC was notified but has yet to respond.
This was tested against QVT/Net Popd 4.20 coming with the QVT/Net
5.0 suite, running on MS Win2k.
yadayadayada
Free sk8! (http://www.freesk8.org)
SNS Research is rfpolicy (http://www.wiretrip.net/rfp/policy.html)
compliant, all information is provided on AS IS basis.
EOF, but Strumpf Noir Society will return!
|
|
