Signature Detail
Short Name |
IMAP:OVERFLOW:USER |
|---|---|
Severity |
High |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
IMAP |
Release Date |
2003/08/27 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
IMAP: Username Buffer Overflow
This protocol anomaly triggers when it detects an IMAP user name that is too long. This can indicate a buffer overflow attempt.
Extended Description
Novell NetMail is susceptible to a buffer overflow vulnerability in the IMAP command continuation function in the IMAP agent. This issue is due to a lack of proper boundary checks when copying user-supplied data to insufficiently-sized memory buffers. This vulnerability allows remote attackers to execute arbitrary machine code in the context of the affected server process. This issue was originally documented in BID 13926 (Novell NetMail Multiple Remote Vulnerabilities).
Affected Products
- Novell NetMail 3.0.1
- Novell NetMail 3.0.3
- Novell NetMail 3.0.3 a
- Novell NetMail 3.0.3 b
- Novell NetMail 3.1.0
- Novell NetMail 3.10.0
- Novell NetMail 3.10.0 a
- Novell NetMail 3.10.0 b
- Novell NetMail 3.10.0 c
- Novell NetMail 3.10.0 d
- Novell NetMail 3.10.0 e
- Novell NetMail 3.10.0 f
- Novell NetMail 3.10.0 g
- Novell NetMail 3.10.0 h
- Novell NetMail 3.1.0 f
- Novell NetMail 3.52.0
- Novell NetMail 3.52.0 A
- Novell NetMail 3.52.0 B
References
- BugTraq: 14718
- CVE: CVE-2004-1011
- CVE: CVE-2005-1255
- CVE: CVE-2005-1758
- CVE: CVE-2004-1067
- URL: http://seclists.org/lists/bugtraq/1997/Mar/0001.html
- URL: http://www.cse.ohio-state.edu/cgi-bin/rfc/rfc2060.html