Signature Detail
Short Name |
IMAP:OVERFLOW:LITERAL-TOKEN |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
IMAP |
Keywords |
Qualcomm WorldMail IMAP Literal Token Parsing Buffer Overflow |
Release Date |
2010/10/25 |
Update Number |
1798 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
IMAP: Qualcomm WorldMail IMAP Literal Token Parsing Buffer Overflow
This signature detects attempts to exploit a known vulnerability in Qualcomm WorldMail IMAP service. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the targeted service.
Extended Description
WorldMail IMAPd service is prone to a remote buffer-overflow vulnerability. This issue is due to a failure in the application to do proper bounds checking on user-supplied data before using it in finite-sized buffers. An attacker can exploit this issue to crash the server resulting in a denial of service to legitimate users. Arbitrary code execution may also be possible; this may facilitate a compromise of the underlying system. This issue is reported to affect IMAPd service version 6.1.19.0 of WorldMail 3.0; other versions may also be vulnerable.
Affected Products
- Qualcomm Eudora WorldMail Server 3.0.0
References
- BugTraq: 15980
- CVE: CVE-2005-4267