Secunia

Fortinet has reported multiple vulnerabilities in Foxmail Server, which can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system.

1) A boundary error in the handling of input passed to the "Mail From:" command can be exploited to cause a buffer overflow by passing an overly long string (about 5000 bytes).

2) A boundary error within the handling of input passed to the "USER" command in the POP3 service can be exploited to cause a buffer overflow by passing an overly long string (about 5000 bytes).

3) A format string error within the handling of input passed to the "USER" command in the POP3 service can be exploited via a specially crafted string containing format specifiers.

The vulnerabilities have been reported in version 2.0 for Windows. Other versions may also be affected.

Solution
Use another product.

Provided and/or discovered by
Xin Ouyang, Fortinet.

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area