I am using a fairly old version of ICS from 2002, with Delphi 5. I have not 
done much programming in Delphi since then, but I have become aware of a buffer 
overflow in the SMTP part of my application. At this moment, I don't know if it 
is ICS or my app that is causing it.

In the USER or RCPT TO: (I think USER is POP3, not SMTP...) if more than 4000 
bytes are sent, then it apparently causes 100% cpu, DoS and will allow an 
attacker to run commands.

As I haven't done anything with ICS or Delphi for a while, I am not sure where 
to look.

Also, if I download the latest ICS, will there be anything that is likely to 
cause me programming difficulties? Will any buffer overflow vulnerabilities 
been fixed?


Best regards,
Dave Colliver.
http://www.FOCUSPortals.com - Local franchises available
To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be

Reply via email to