Description
Stack-based buffer overflow in the trace message functionality in Pegasus Mail 4.21a through 4.21c and 4.30PB1 allow remote attackers to execute arbitrary code via a long POP3 reply.
References
- 21842 vdb-entry
- ADV-2005-3004 vdb-entry
- http://secunia.com/secunia_research/2005-61/advisory/
- 20051220 Secunia Research: Pegasus Mail Buffer Overflow and Off-by-OneVulnerabilities mailing-list
- 1015385 vdb-entry
- 17992 third-party-advisory
- 15973 vdb-entry
- http://www.pmail.com/newsflash.htm#secunia