The remote pop3 server seems vulnerable to a buffer overflow when issued a very long user name (10,000 chars)

This *may* allow an attacker to execute arbitrary commands as root on the remote POP3 server.

The ZetaMail server will crash if a username/password pair longer than 3500 characters is supplied by the client.

There are buffer overflow vulnerabilities present in 3.x versions of the Qualcomm popper daemon. These vulnerabilities are remotely executable and since the daemons run as root, the host running qpopper can be completely compromised anonymously.

Delegate is reportedly vulnerable to a stack-based buffer overflow that may allow for the execution of arbitrary code. The condition exists if the argument to the 'USER' command is of excessive length. 

The remote qpopper service may be vulnerable to a denial of service (DoS) attack. If a string of longer than approximately 2048 characters is sent to the qpopper process, a denial of service condition will occur.

In version 4, a buffer overflow was introduced into the qpopper source tree. This buffer overflow is related to the handling of the client-supplied username and is present when a POP3 session is being initiated. It is believed that the overflow occurs before authentication, so it may not be required that users have valid POP accounts. This vulnerability can lead to a compromise of root privileges to remote attackers.

ID	名稱	產品	系列	已發布	已更新	嚴重性
10206	Rover POP3 Server Username Remote Overflow	Nessus	Gain a shell remotely	2000/1/3	2018/7/30	critical
1790	ZetaMail Remote DoS	Nessus Network Monitor	POP Server	2004/8/20	2019/3/6	critical
1793	Qualcomm Qpopper Remote Overflows	Nessus Network Monitor	POP Server	2004/8/20	2019/3/6	critical
1791	Delegate Multiple Function Remote Overflows	Nessus Network Monitor	POP Server	2004/8/20	2019/3/6	critical
1792	Qualcomm Qpopper Remote Overflow DoS	Nessus Network Monitor	POP Server	2004/8/20	2019/3/6	critical
1794	Qualcomm Qpopper Username Remote Overflow	Nessus Network Monitor	POP Server	2004/8/20	2019/3/6	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical