Secunia Logo
 
CVE Reference: CVE-2007-4440
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2007-4440

Description:
Stack-based buffer overflow in the MercuryS SMTP server in Mercury Mail Transport System, possibly 4.51 and earlier, allows remote attackers to execute arbitrary code via a long AUTH CRAM-MD5 string. NOTE: this might overlap CVE-2006-5961.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/36117
  http://xforce.iss.net/xforce/xfdb/36299

ST
  1018587

SAID
  Secunia Advisory: SA26519

MILW0RM
  http://www.milw0rm.com/exploits/4294

FULLDISC
  http://archives.neohapsis.com/archives/fulldisclosure/2007-08/0341.html

CONFIRM
  http://www.pmail.com/m32_451.htm

BID
  25357


Return to the previous page.