Jonathan Rockway has reported a vulnerability in qwik-smtpd, which can be exploited by malicious people to relay mail.

The vulnerability is caused due to a boundary error within the handling of client "HELO" commands. This can be exploited to cause a buffer overflow and overwrite the "localIP" variable via a specially crafted argument to the "HELO" command.

Successful exploitation makes it possible to relay mail through the mail server.

The vulnerability has been reported in version 0.3. Other versions may also be affected.

Solution
A fix is reportedly available in the CVS repository.

Provided and/or discovered by
Jonathan Rockway

Changelog
Further details available in Customer Area

Original Advisory
http://tigger.uic.edu/~jlongs2/holes/qwik-smtpd.txt

Deep Links
Links available in Customer Area