Secunia

Reed Arvin has discovered a vulnerability in DMS POP3 Server, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error during the authentication process and can be exploited to cause a buffer overflow by supplying an overly long username or password (more than 1024 bytes).

Successful exploitation may allow execution of arbitrary code.

The vulnerability has been confirmed in version 1.5.3.27. Other versions are reportedly also affected.

Solution
Apply patch:
Further details available in Customer Area

Provided and/or discovered by
Reed Arvin

Changelog
Further details available in Customer Area

Original Advisory
http://www.digitalmapping.sk.ca/pop3srv/Update.asp

Deep Links
Links available in Customer Area