Описание
Multiple buffer overflows in eXtremail 2.1.1 and earlier allow remote attackers to (1) have an unknown impact by sending multiple long strings to the IMAP port (143/tcp); (2) execute arbitrary code via a long string in an IMAP AUTHENTICATE PLAIN action, involving the ifParseAuthPlain function; (3) execute arbitrary code via a long LOGIN command to the admin interface port (4501/tcp); or (4) execute arbitrary code via a long string in an IMAP AUTHENTICATE LOGIN (aka CRAM-MD5 authentication) action, involving the ifProcImapAuth1 function.
Multiple buffer overflows in eXtremail 2.1.1 and earlier allow remote attackers to (1) have an unknown impact by sending multiple long strings to the IMAP port (143/tcp); (2) execute arbitrary code via a long string in an IMAP AUTHENTICATE PLAIN action, involving the ifParseAuthPlain function; (3) execute arbitrary code via a long LOGIN command to the admin interface port (4501/tcp); or (4) execute arbitrary code via a long string in an IMAP AUTHENTICATE LOGIN (aka CRAM-MD5 authentication) action, involving the ifProcImapAuth1 function.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2007-5466
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37209
- https://www.exploit-db.com/exploits/4533
- https://www.exploit-db.com/exploits/4534
- https://www.exploit-db.com/exploits/4535
- http://secunia.com/advisories/27220
- http://www.digit-labs.org/files/exploits/extremail-v4.c
- http://www.digit-labs.org/files/exploits/extremail-v5.c
- http://www.digit-labs.org/files/exploits/extremail-v6.c
- http://www.digit-labs.org/files/exploits/extremail-v8.pl
- http://www.securityfocus.com/archive/1/482293
- http://www.securityfocus.com/bid/26074
Связанные уязвимости
Multiple buffer overflows in eXtremail 2.1.1 and earlier allow remote attackers to (1) have an unknown impact by sending multiple long strings to the IMAP port (143/tcp); (2) execute arbitrary code via a long string in an IMAP AUTHENTICATE PLAIN action, involving the ifParseAuthPlain function; (3) execute arbitrary code via a long LOGIN command to the admin interface port (4501/tcp); or (4) execute arbitrary code via a long string in an IMAP AUTHENTICATE LOGIN (aka CRAM-MD5 authentication) action, involving the ifProcImapAuth1 function.