XtraMail
1.1 Denial of Service Reported November 10, 1999 by USSRLABS
UssrLabs reported problems in Artisoft"s XtraMail v1.1 due to improper bounds checking that can lead to a buffer overflow. When a user logs into the POP server and sends a password of 1500 characters, the server crashes. DEMONSTRATION CODE POP Overflow: +OK XtraMail POP3 Server (v1.11 69970090850) for Windows 95
ready at Wed, 10 Nov 99 06:14:18 +-300 Where buffer is 1500 characters. SMTP Overflow: 220 XtraMail SMTP Server (v1.11 69970090850) for Windows 95
ready at Wed, 10 Nov 99 06:16:14 +-300 Where buffer is 10000 characters. Control Service Overflow: XtraMail Control Service (v1.11 69970090850) for Windows 95
ready at Wed, 10 Nov 99 06:20:11 +-300 Where buffer is 10000 characters. VENDOR RESPONSE UssrLabs did not notify Artisoft of this problem, however the vendor was made aware through other channels and has since released an updated version (v1.2) of XtraMail.
Discovered by USSRLABS Posted here at NTSecurity.net on November 14, 1999 |
XtraMail 1.1 Denial of Service - 09 Mar 1999
0 comments
Hide comments