Secunia

Description
Luigi Auriemma has discovered some vulnerabilities in SLMail Pro, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise a vulnerable system.

1) An error within WebContainer.exe can be exploited to corrupt memory by e.g. sending overly long, specially crafted HTTP requests to default port 801/TCP.

Successful exploitation may allow execution of arbitrary code.

2) An error within WebContainer.exe can be exploited to cause a stack overflow via a specially crafted HTTP request sent to default port 801/TCP.

3) An error within SLMail.exe can be exploited to cause the service to stop listening on port 54/UDP by e.g. sending an overly large packet to port 54/UDP.

The vulnerabilities are confirmed in version 6.3. Other versions may also be affected.

Solution
Restrict network access to the services.

Provided and/or discovered by
Luigi Auriemma

Changelog
Further details available in Customer Area

Original Advisory
http://aluigi.altervista.org/adv/slmaildos-adv.txt

Deep Links
Links available in Customer Area