The MAIL FROM: buffer overflow was caught by the talented guys at eeye.com. http://www.eeye.com/html/Research/Advisories/AD20010424.html It was fixed by IpSwitch long ago.
William Lefkovics eEye Digital Security -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Greg Foulks Sent: Friday, September 19, 2003 8:35 AM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] Buffer Problem in the mail from Thanks Rick... You don't know if it was fixed for SMTP in version 8.03? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Rick Leske Sent: Friday, September 19, 2003 11:28 AM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] Buffer Problem in the mail from Yes.. version 8.03 fixes it for pop3 anyway ~Rick > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Greg Foulks > Sent: Friday, September 19, 2003 10:13 AM - FamHost > To: IMail_Forum (E-mail) > Subject: [IMail Forum] Buffer Problem in the mail from > > > Is anyone aware of a problem with Imail version 6.x that would allow > for a buffer over run in the mail from? > > I ran a security scan on my mailservers IP address and found this error... > > Description > smtp (25/tcp) > > There seem to be a buffer overflow in the remote SMTP server when the > server is issued a too long argument to the 'MAIL FROM' > command, such as : > > MAIL FROM: [EMAIL PROTECTED] > > This problem may allow an attacker to prevent this host to act as a > mail host and may even allow him to execute arbitrary code on this > system. > > > Solution : Inform your vendor of this vulnerability and wait for a > patch. > > Risk factor : High > CVE : CVE-2000-0452 > BID : 1229 > > > > Greg Foulks > NewFound Technologies, Inc. > [EMAIL PROTECTED] > http://www.nfti.com > 614.318.5036 > > ------------------------------------------------------------------ > ------------ > [This E-mail was scanned for viruses by Declude Virus Scanner on > mail.nfti.com] > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > ___________________________________________________________________ > Virus Scanned and Filtered by http://www.FamHost.com E-Mail System. > > ___________________________________________________________________ Virus Scanned and Filtered by http://www.FamHost.com E-Mail System. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ ---------------------------------------------------------------------------- -- [This E-mail was scanned for viruses by Declude Virus Scanner on mail.nfti.com] ---------------------------------------------------------------------------- -- [This E-mail was scanned for viruses by Declude Virus Scanner on mail.nfti.com] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
