Description
Buffer overflow in the base64 decoder in MERCUR Mailserver 4.2 before SP3a allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long (1) AUTH command to the POP3 server or (2) AUTHENTICATE command to the IMAP server.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Atrium Software Mercur MailServer 3.3/4.0/4.2 - IMAP AUTH Remote Buffer Overflow EDB-23267 · dos · Oct 20, 2003 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 8861 vdb-entry
- 10038 third-party-advisory
- 8889 vdb-entry
- 2688 vdb-entry
- 20031024 Vulnerability in MERCUR Mail Server v4.2 SP3 and below mailing-list
- mercur-auth-command-dos(13468) vdb-entry
- http://www.atrium-software.com/mail%20server/pub/mcr42sp3a.html
- http://www.securiteam.com/windowsntfocus/6U00N1P8KC.html