void has discovered a vulnerability in Mercury Mail Transport System, which can be exploited by malicious users to compromise a vulnerable system.

The vulnerability is caused due to a boundary error within the IMAPD module when processing the IMAP SEARCH command. This can be exploited to cause a stack-based buffer overflow via an overly long argument (over 60 bytes) passed to the affected command.

Successful exploitation allows execution of arbitrary code.

The vulnerability is confirmed in version 4.52. Other versions may also be affected.

Solution
Restrict access to trusted users only.

Provided and/or discovered by
void, ph4nt0m.org

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://milw0rm.com/exploits/4429

Deep Links
Links available to Secunia VIM customers