Buffer overflows in Xtramail 1.11 allow attackers to cause a denial of service (crash) and possibly execute arbitrary commands via (1) a long PASS command in the POP3 service, (2) a long HELO command in the SMTP service, or (3) a long user name in the Control Service.

The remote Xtramail Control Server is vulnerable to a buffer overflow when a user supplies a too long argument to as its username. An attacker may use this flaw to disable this service remotely or to execute arbitrary code on this host, with the privileges of the Xtramail server (typically, SYSTEM).

The remote Xtramail POP server is vulnerable to a buffer overflow when the user supplies a long password string. An attacker may use this flaw to execute arbitrary code on this host with the privileges of the Xtramail server (typically, SYSTEM).

The remote Xtramail SMTP server is vulnerable to a buffer overflow when the user supplies a too long argument to the HELO command. An attacker may use this flaw to execute arbitrary code on this host with the privileges of the Xtramail server (typically, SYSTEM).

The remote POP3 server is vulnerable to the following buffer overflow :

 USER test PASS <buffer>

This may allow an attacker to execute arbitrary commands as root on the remote POP3 server.

The remote host is running a version of XtraMail with a remote buffer overflow vulnerability. The overflow is caused by by issuing the 'HELO' command, followed by a long argument.

The HELO command is typically one of the first commands required by a mail server. The command is used by the mail server as a first attempt to allow the client to identify itself. As such, this command occurs before there is any authentication or validation of mailboxes, etc.

This issue may allow an attacker to crash the mail server, or possibly execute arbitrary code.

The remote host is running a version of XtraMail with a remote buffer overflow vulnerability. XtraMail includes a remote administration utility which listens on port 32000 for logins. Providing a username of over 15,000 characters causes a buffer overflow, which could allow a remote attacker to crash the service or potentially execute arbitrary code.

ID	Name	Product	Family	Severity
1799	Xtramail < 1.12 Control Server Overflow Denial of Service	Nessus Network Monitor	POP Server	high
1798	Xtramail < 1.12 POP3 Overflow	Nessus Network Monitor	POP Server	critical
2035	Xtramail SMTP Multiple Command Remote Overflows	Nessus Network Monitor	SMTP Servers	critical
10325	XtraMail POP3 PASS Command Remote Overflow	Nessus	Gain a shell remotely	critical
10324	XtraMail SMTP HELO Command Remote Overflow	Nessus	SMTP problems	critical
10323	XtraMail Control Service Username Overflow	Nessus	Misc.	high

Detections

Analytics

CVE-1999-1511

critical

Tenable Plugins

high

critical

critical

critical

critical

high