[NT] SLWebMail Multiple Buffer Overflow Vulnerabilities

From: SecuriTeam (support_at_securiteam.com)
Date: 03/08/04

  • Next message: SecuriTeam: "[NT] SLMail Pro Supervisor Report Center Buffer Overflow" 
    To: list@securiteam.com
Date: 8 Mar 2004 16:34:25 +0200

    The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
    - - promotion

    The SecuriTeam alerts list - Free, Accurate, Independent.

    Get your security news from a reliable source.
    http://www.securiteam.com/mailinglist.html

    - - - - - - - - -

      SLWebMail Multiple Buffer Overflow Vulnerabilities
    ------------------------------------------------------------------------

    SUMMARY

     <http://www.slmail.com/products/slmailpro/default.asp> SLWebMail is a web
    based e-mail solution designed for the small to medium enterprise.
    SLWebMail runs atop Microsoft's Internet Information Server and is
    implemented as a set of ISAPI applications. SLWebMail suffers from
    multiple buffer overflow vulnerabilities.

    DETAILS

    Vulnerable Systems:
     * SLMail Pro version 2.0.9 and earlier

    Immune Systems:
     * SLMail Pro version 2.0.14 or newer

    SLWebMail is installed with SLMail Pro. Implemented as a set of ISAPI
    applications, many suffer from stack based buffer overflow
    vulnerabilities. Known to be vulnerable are user.dll, loadpageadmin.dll
    and loadpageuser.dll. Even though these ISAPI applications are loaded into
    dllhost, which runs in the security context of the IWAM account and not
    the local system account, the risk should still be considered as high and
    customers should install the patch as soon as is possible.

    Fix Information:
    SLMail have made available a patch to resolve these issues:
    <http://216.26.170.92/Products/SLMailPro/Utilities.asp>
    http://216.26.170.92/Products/SLMailPro/Utilities.asp. Customers are urged
    to update as soon as is possible.

    ADDITIONAL INFORMATION

    The information has been provided by <mailto:david@ngssoftware.com> David
    Litchfield.

    The original article can be found at:
    <http://www.ngssoftware.com/advisories/slmailwm.txt>
    http://www.ngssoftware.com/advisories/slmailwm.txt.

    ========================================

    This bulletin is sent to members of the SecuriTeam mailing list.
    To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@securiteam.com
    In order to subscribe to the mailing list, simply forward this email to: list-subscribe@securiteam.com

    ====================
    ====================

    DISCLAIMER:
    The information in this bulletin is provided "AS IS" without warranty of any kind.
    In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.

  • Next message: SecuriTeam: "[NT] SLMail Pro Supervisor Report Center Buffer Overflow"

    Relevant Pages

    • [NT] CA ARCServe Backup for Laptops and Desktops Multiple Buffer Overflow Vulnerabilities
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... CA ARCServe Backup for Laptops and Desktops Multiple Buffer Overflow ... Remote exploitation of multiple buffer overflow vulnerabilities in ... rxsGetSubDirs, rxsGetServerDBPathName, rxsSetServerOptions, rxsDeleteFile, ...
      (Securiteam)
    • [NT] Novell eDirectory Multiple Vulnerabilities
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Novell eDirectory Multiple Vulnerabilities ... Three different vulnerabilities were discovered in Novell's eDirectory ... NCP over IP length Heap Overflow: ...
      (Securiteam)
    • [NEWS] Multiple Vendor ImageMagick DCM and XWD Buffer Overflow Vulnerabilities
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Multiple Vendor ImageMagick DCM and XWD Buffer Overflow Vulnerabilities ...
      (Securiteam)
    • [UNIX] Apache HTTPD suEXEC Multiple Vulnerabilities
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Apache HTTPD suEXEC Multiple Vulnerabilities ... Local exploitation of multiple vulnerabilities within Apache Software ... Foundation's suexec utility could allow an attacker to execute arbitrary ...
      (Securiteam)
    • [UNIX] IBM DB2 Universal Database Multiple Privilege Escalation Vulnerabilities
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... IBM DB2 Universal Database Multiple Privilege Escalation Vulnerabilities ...
      (Securiteam)