Two vulnerabilities have been discovered in Qbik WinGate, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerabilities are caused due to format string errors within the SMTP service logging functionality when handling unimplemented commands or commands sent in a bad sequence. This can be exploited by passing a specially crafted argument containing format string specifiers to either an unimplemented SMTP command or a command while in an invalid state.

Successful exploitation allows execution of arbitrary code.

The vulnerabilities are confirmed in version 6.2.1 and reported in versions 5.x and 6.x prior to 6.2.2.

Solution
Update to version 6.2.2.
Further details available to Secunia VIM customers

Provided and/or discovered by
Originally reported as a DoS when sending a bad command sequence by:
* Stephen Fewer, Harmony Security.

Additional information provided by Secunia Research.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Harmony Security:
http://www.harmonysecurity.com/HS-A007.html

Qbik:
http://www.wingate.com/news.php?id=50

Deep Links
Links available to Secunia VIM customers