Technical Description

Multiple vulnerabilities were identified in various E-Post Mail Server products, which could be exploited by remote attackers or malicious users to execute arbitrary commands, disclose sensitive information, or cause a denial of service.

The first issue is due to a stack overflow error in the SMTP service that does not properly handle an overly long username passed to the "AUTH PLAIN" and "AUTH LOGIN" commands, which could be exploited by attackers to execute arbitrary commands.

The second flaw is due to a stack overflow error in the POP3 service that does not properly handle an overly long username passed to the "APOP" command, which could be exploited by attackers to execute arbitrary commands.

The third vulnerability is due to an error in the IMAP service that does not properly handle an overly long mailbox name passed to the "DELETE" command, which could be exploited by attackers to cause a denial of service.

The fourth flaw is due to an input validation error in the IMAP service that does not properly validate certain arguments passed to the "LIST" command, which could be exploited by attackers to obtain directory listings of arbitrary folders, or cause a denial of service by listing certain directories.

The fifth vulnerability is due to input validation errors in the IMAP service when handling specially crafted arguments passed to the "APPEND", "COPY", and "RENAME" commands, which could be exploited by malicious users to create ".MSG" files and arbitrary directories outside of the mail directory.

The sixth issue is due to an infinite loop error in the IMAP service when a user sends an APPEND command and terminates the connection without sending the expected amount of data, which could be exploited by attackers to cause the IMAP server to exhaust all available memory resources causing a denial of service.

Credits

Vulnerabilities reported by Tan Chew Keong

ChangeLog

2006-01-25 : Initial release

Vulnerability Management

Subscribe to FrSIRT VNS and receive real-time e-mail and SMS alerts when new vulnerabilities, exploits, or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form or by email to updates@frsirt.com.