XMail CTRLServer remote buffer overflow vulnerability

SUMMARY I discovered all versions of XMailhttp://www.mycio.com/davidel/xmail have buffer overflow vulnerabilities in CTRLServer.These holes is NOT same as APOP,USER command buffer overflow vulnerability discovered beforetime.And this problem allows a remote attacker to execute arbitrary code by...