Secunia

A vulnerability was reported in MailMax, which could be exploited by a malicious person to conduct a DoS (Denial of Service). However, further research from security specialist Mark Litchfield indicates that the vulnerability also can be exploited to compromise a vulnerable system.

The vulnerability is caused due to a boundary error in the included IMAPMax module. A malicious person can exploit this by supplying a long, specially crafted argument to the "LOGIN" command during authentication, which can result in execution of arbitrary code with SYSTEM privileges.

Solution
Update to IMAPMax version 5.0.10.8 or MailMax version 5.5.
Further details available in Customer Area

Provided and/or discovered by
Dennis Rand, infowarfare.dk.

Original Advisory
http://www.infowarfare.dk/Advisories/iw-11-advisory.txt

Deep Links
Links available in Customer Area