Signature Detail

DNS: MailEnable SMTP Service SPF Lookup Buffer Overflow

This signature detects attempts to exploit a known vulnerability against MailEnable SMTP. The vulnerability is due to a flaw when processing overly large Sender Policy Framework (SPF) data returned in DNS TXT records. An unauthenticated remote attacker may leverage this vulnerability by sending crafted DNS responses to the target host, causing a denial of service condition. It is also potentially possible to execute arbitrary code with SYSTEM level privileges. In an attack case where code injection is not successful, the affected SMTP service will terminate upon processing of the malicious message. If the SMTP service is not configured to restart automatically, the services will be unavailable until the process is restarted manually. In a more sophisticated attack, where code injection is successful, the behaviour of the target is entirely dependent on the intended function of the injected code. The code in such a case would execute within the security context of the SYSTEM account.

Extended Description

MailEnable is prone to a remote denial-of-service vulnerability. This issue allows remote attackers to crash the application, denying further service to legitimate users.

Affected Products

• MailEnable 1.5015.0
• MailEnable 1.5016.0
• MailEnable 1.5017.0
• MailEnable 1.5018.0
• MailEnable 1.610.0
• MailEnable 1.701.0
• MailEnable 1.702.0
• MailEnable 1.703.0
• MailEnable 1.704.0
• MailEnable 1.71.0
• MailEnable 1.72.0
• MailEnable 1.8.0
• MailEnable 1.9.0
• MailEnable 1.91
• MailEnable 1.92
• MailEnable 1.93
• MailEnable 1.96
• MailEnable MailEnable Enterprise Edition 1.0.0
• MailEnable MailEnable Enterprise Edition 1.0.0 1
• MailEnable MailEnable Enterprise Edition 1.0.0 2
• MailEnable MailEnable Enterprise Edition 1.0.0 3
• MailEnable MailEnable Enterprise Edition 1.0.0 4
• MailEnable MailEnable Enterprise Edition 1.1.0
• MailEnable MailEnable Enterprise Edition 1.2
• MailEnable MailEnable Enterprise Edition 1.21
• MailEnable MailEnable Enterprise Edition 2.0
• MailEnable MailEnable Enterprise Edition 2.1
• MailEnable MailEnable Enterprise Edition 2.2
• MailEnable MailEnable Professional 1.0.0 004
• MailEnable MailEnable Professional 1.0.0 005
• MailEnable MailEnable Professional 1.0.0 006
• MailEnable MailEnable Professional 1.0.0 007
• MailEnable MailEnable Professional 1.0.0 008
• MailEnable MailEnable Professional 1.0.0 009
• MailEnable MailEnable Professional 1.0.0 010
• MailEnable MailEnable Professional 1.0.0 011
• MailEnable MailEnable Professional 1.0.0 012
• MailEnable MailEnable Professional 1.0.0 013
• MailEnable MailEnable Professional 1.0.0 014
• MailEnable MailEnable Professional 1.0.0 015
• MailEnable MailEnable Professional 1.0.0 016
• MailEnable MailEnable Professional 1.0.0 017
• MailEnable MailEnable Professional 1.1.0
• MailEnable MailEnable Professional 1.101.0
• MailEnable MailEnable Professional 1.102.0
• MailEnable MailEnable Professional 1.103.0
• MailEnable MailEnable Professional 1.104.0
• MailEnable MailEnable Professional 1.105.0
• MailEnable MailEnable Professional 1.106.0
• MailEnable MailEnable Professional 1.107.0
• MailEnable MailEnable Professional 1.108.0
• MailEnable MailEnable Professional 1.109.0
• MailEnable MailEnable Professional 1.110.0
• MailEnable MailEnable Professional 1.111.0
• MailEnable MailEnable Professional 1.112.0
• MailEnable MailEnable Professional 1.113.0
• MailEnable MailEnable Professional 1.114.0
• MailEnable MailEnable Professional 1.115.0
• MailEnable MailEnable Professional 1.116.0
• MailEnable MailEnable Professional 1.12.0
• MailEnable MailEnable Professional 1.13.0
• MailEnable MailEnable Professional 1.14.0
• MailEnable MailEnable Professional 1.15.0
• MailEnable MailEnable Professional 1.16.0
• MailEnable MailEnable Professional 1.17.0
• MailEnable MailEnable Professional 1.18.0
• MailEnable MailEnable Professional 1.19.0
• MailEnable MailEnable Professional 1.2.0
• MailEnable MailEnable Professional 1.2.0 A
• MailEnable MailEnable Professional 1.5.0
• MailEnable MailEnable Professional 1.51.0
• MailEnable MailEnable Professional 1.52.0
• MailEnable MailEnable Professional 1.53.0
• MailEnable MailEnable Professional 1.54.0
• MailEnable MailEnable Professional 1.6.0
• MailEnable MailEnable Professional 1.7.0
• MailEnable MailEnable Professional 1.72
• MailEnable MailEnable Professional 1.73
• MailEnable MailEnable Professional 2.0
• MailEnable MailEnable Professional 2.1
• MailEnable MailEnable Professional 2.2

References

• BugTraq: 20091
• CVE: CVE-2006-4616