Test ID:	1.3.6.1.4.1.25623.1.0.800970
Category:	Buffer overflow
Title:	Pegasus Mail POP3 Response Buffer Overflow Vulnerability
Summary:	Check for the version of Pegasus Mail
Description:	Overview: This host is running Pegasus Mail which is prone to stack-based Buffer Overflow vulnerability. Vulnerability Insight: A stack based buffer overflow error occus due to improper bounds checking when processing POP3 responses. Impact: Successful exploitation will allow attackers to execute arbitrary code or cause the application to crash by sending overly long error responses from a remote POP3 server to the affected mail client. Impact Level: Application Affected Software/OS: Pegasus Mail 4.51 and prior. Fix: No solution or patch is available as of 05th November, 2009.Information regarding this issue will be updated once the solution details are available. For updates refer to http://www.pmail.com/downloads_s3_t.htm References: http://secunia.com/advisories/37134 http://www.vupen.com/english/advisories/2009/3026 http://securitytracker.com/alerts/2009/Oct/1023075.html
Cross-Ref:	BugTraq ID: 36797 Common Vulnerability Exposure (CVE) ID: CVE-2009-3838 Bugtraq: 20091022 {PRL} Pegasus Mail client BoF (Google Search) http://www.securityfocus.com/archive/1/archive/1/507377/100/0/threaded http://www.packetstormsecurity.org/0910-exploits/pegasusmc-dos.txt http://www.vupen.com/exploits/Pegasus_Mail_POP3_Message_Handling_Remote_Buffer_Overflow_Exploit_3026233.php http://www.securityfocus.com/bid/36797 http://osvdb.org/59261 http://www.securitytracker.com/id?1023075 http://secunia.com/advisories/37134 http://www.vupen.com/english/advisories/2009/3026 XForce ISS Database: pegasus-pop3-bo(53933) http://xforce.iss.net/xforce/xfdb/53933
Copyright	Copyright (C) 2009 Greenbone Networks GmbH

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: