| |||||||||||||
| Test Kennung: | 1.3.6.1.4.1.25623.1.0.801041 |
| Kategorie: | Buffer overflow |
| Titel: | Eureka Email Stack-Based Buffer Overflow Vulnerability |
| Zusammenfassung: | Check for the version of Eureka Email |
| Beschreibung: | Overview: This host is installed with Eureka Email and is prone to stack-based buffer overflow vulnerability. Vulnerability Insight: The flaw is due to a boundary error in the processing POP3 responses. This can be exploited to cause a stack-based buffer overflow via an overly long error response. Impact: Successful exploitation allows remote attackers to crash an affected client or execute arbitrary code by tricking a user into connecting to a malicious POP3 server. Impact level: Application. Affected Software/OS: Eureka Email version 2.2q and prior. Fix: No solution or patch is available as of 05th November, 2009. Information regarding this issue will update once the solution details are available. For updates refer to http://www.eureka-email.com/ References: http://xforce.iss.net/xforce/xfdb/53940 http://secunia.com/advisories/product/27632/ http://www.vupen.com/english/advisories/2009/3025 http://www.packetstormsecurity.org/0910-exploits/eurekamc-dos.txt |
| Querverweis: |
Common Vulnerability Exposure (CVE) ID: CVE-2009-3837 Bugtraq: 20091022 {PRL} Eureka Mail client BoF (Google Search) http://www.securityfocus.com/archive/1/archive/1/507376/100/0/threaded Bugtraq: 20091130 Eureka Mail Client Remote Buffer Overflow Exploit XP SP3 English Egghunter Edition (Google Search) http://www.securityfocus.com/archive/1/archive/1/508126/100/0/threaded http://www.packetstormsecurity.org/0910-exploits/eurekamc-dos.txt http://osvdb.org/59262 http://secunia.com/advisories/37132 http://www.vupen.com/english/advisories/2009/3025 XForce ISS Database: eurekaemail-pop3-bo(53940) http://xforce.iss.net/xforce/xfdb/53940 |
| Copyright | Copyright (C) 2009 Greenbone Networks GmbH |
| Dies ist nur einer von 32582 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten. |
|