Atrium Mercur IMap Subscribe请求远程栈溢出漏洞

Mercur是Atrium Software推出的系列邮件服务器产品。 Mercur的NTLM认证机制实现上存在漏洞，远程攻击者可能利用此漏洞控制服务器或导致服务崩溃。 Mercur的IMAPD在实现NTLM的代码中盲目使用用户提供的长度数据作为memcpy调用的参数，远程攻击者可能利用此问题触发一个栈溢出，导致拒绝服务或执行任意指令。 Atrium Software Mercur v5.00.14 win32 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.atrium-software.com/...

Atrium Mercur Mailserver IMAPD buffer overflow

Multiple buffer overflows in IMAP NTLM authentication implementation. Buffer overflow in SUBSCRIBE command...

Stack overflow

Stack-based buffer overflow in Atrium MERCUR IMAPD allows remote attackers to have an unknown impact via a certain SUBSCRIBE command...

Stack overflow

Multiple integer signedness errors in the NTLM implementation in Atrium MERCUR IMAPD mcrimap4.exe 5.00.14, with SP4, allow remote attackers to execute arbitrary code via a long NTLMSSP argument that triggers a stack-based buffer overflow...

CVE-2007-1579

Stack-based buffer overflow in Atrium MERCUR IMAPD allows remote attackers to have an unknown impact via a certain SUBSCRIBE command...

CVE-2007-1578

Multiple integer signedness errors in the NTLM implementation in Atrium MERCUR IMAPD mcrimap4.exe 5.00.14, with SP4, allow remote attackers to execute arbitrary code via a long NTLMSSP argument that triggers a stack-based buffer overflow...

CVE-2003-1322

Multiple stack-based buffer overflows in Atrium MERCUR IMAPD in MERCUR Mailserver before 4.2.15.0 allow remote attackers to execute arbitrary code via a long 1 EXAMINE, 2 DELETE, 3 SUBSCRIBE, 4 RENAME, 5 UNSUBSCRIBE, 6 LIST, 7 LSUB, 8 STATUS, 9 LOGIN, 10 CREATE, or 11 SELECT command...

CVE-2003-1322

CVE-2003-1322 concerns Atrium MERCUR IMAPD in MERCUR Mailserver up to version 4.2.15.0. The vulnerability is described as multiple stack-based buffer overflows in the IMAPD process that can be triggered by long commands, including: EXAMINE, DELETE, SUBSCRIBE, RENAME, UNSUBSCRIBE, LIST, LSUB, STAT...

CVE-2007-1578

CVE-2007-1578 : MERCUR IMAPD (Atrium MERCUR Messaging Server) is affected by multiple NTLMSSP-related memory corruption issues in the IMAP service’s NTLMSSP handling. The flaw is described as a stack-based buffer overflow triggered by a long NTLMSSP argument, allowing remote attackers to execute ...

CVE-2007-1579

Stack-based buffer overflow in Atrium MERCUR IMAPD allows remote attackers to have an unknown impact via a certain SUBSCRIBE command...

CVE-2007-1579

The CVE-2007-1579 issue affects Atrium MERCUR Messaging Server (MERCUR IMAPD) on Windows, where the IMAP SUBSCRIBE command processing has a stack-based buffer overflow in the IMAP service. The vulnerability allows remote attackers to trigger arbitrary actions via a crafted SUBSCRIBE request, with...

CVE-2007-1578

Multiple integer signedness errors in the NTLM implementation in Atrium MERCUR IMAPD mcrimap4.exe 5.00.14, with SP4, allow remote attackers to execute arbitrary code via a long NTLMSSP argument that triggers a stack-based buffer overflow...

CVE-2003-1322: Undefined Security Weakness

Multiple stack-based buffer overflows in Atrium MERCUR IMAPD in MERCUR Mailserver before 4.2.15.0 allow remote attackers to execute arbitrary code via a long 1 EXAMINE, 2 DELETE, 3 SUBSCRIBE, 4 RENAME, 5 UNSUBSCRIBE, 6 LIST, 7 LSUB, 8 STATUS, 9 LOGIN, 10 CREATE, or 11 SELECT command...

CVE-2007-1579: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Atrium MERCUR IMAPD allows remote attackers to have an unknown impact via a certain SUBSCRIBE command...

CVE-2007-1578: Undefined Security Weakness

Multiple integer signedness errors in the NTLM implementation in Atrium MERCUR IMAPD mcrimap4.exe 5.00.14, with SP4, allow remote attackers to execute arbitrary code via a long NTLMSSP argument that triggers a stack-based buffer overflow...

Mercur Mailserver 5.0 SP3 (IMAP) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits =============================================================== Mercur Mailserver 5.0 SP3 IMAP Remote Buffer Overflow Exploit =============================================================== / mercur.cpp Atrium Mercur IMAP 5.0 SP3 Messaging...

Mercur MailServer 5.0 SP3 - 'IMAP' Remote Buffer Overflow (1)

/ mercur.cpp Atrium Mercur IMAP 5.0 SP3 Messaging Multiple IMAP Commands Remote Exploit Copyright C 2006 Javaphile Group http://www.javaphile.org Exploits code by : pll Ellison.Tangatgmaildotcom Bug Reference: http://www.frsirt.com/bulletins/4332 / include include include include pragma commentli...

Mercur Messaging 2005 IMAP Login Buffer Overflow

This module exploits a stack buffer overflow in Atrium Mercur IMAP 5.0 SP3. Since the room for shellcode is small, using the reverse ordinal payloads yields the best results. Module Options msf use exploit/windows/imap/mercur/login msf undefinedlogin show actions ...actions... msf undefinedlogin...

[Full-disclosure] Mercur IMAPD 5.0 SP3 DoS Exploit or more?

Hi folks, I found this bugs in a imap-server called Mercur IMAP 5.0 SP3 from http://www.atrium-software.com/, but i was not able to exploit it successful for a remote shell on WinXP ServicePack2. The program has an intern check for the string length or something like that. I can overwrite the EIP...

Atrium Software Mercur Mailserver POP3 AUTH Remote Buffer Overflow Vulnerability

Description A problem has been reported in MERCUR Mailserver when handling the POP3 AUTH command. This problem may make it possible for an attacker crash the service on a vulnerable system, or gain unauthorized access. Technologies Affected Atrium Software MERCUR Mailserver 3.3.0 Atrium Software...