From: Secunia Security Advisories (sec-advsecunia.com)
Date: Tue Dec 16 2003 - 07:31:30 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

TITLE:
Cyrus IMSP Server Address Book Handling Buffer Overflow Vulnerability

SECUNIA ADVISORY ID:
SA10441

VERIFY ADVISORY:
http://www.secunia.com/advisories/10441/

CRITICAL:
Highly critical

IMPACT:
System access

WHERE:
From remote

SOFTWARE:
Cyrus IMSP Server 1.x

DESCRIPTION:
Felix Lindner and Michael Guenther have reported a vulnerability in
Cyrus IMSP Server, which can be exploited by malicious people to
compromise a vulnerable system.

The vulnerability is caused due to a boundary error in the function
"abook_dbname()" during address book handling. This can be exploited
to cause a buffer overflow by sending a specially crafted message
containing an overly long name string.

Successful exploitation allows execution of arbitrary code on a
vulnerable system.

The vulnerability has been reported in versions 1.4, 1.5a6, 1.6a3,
and 1.7.

SOLUTION:
Update to version 1.6a4 or 1.7a.

Cyrus IMSP Server 1.6a4:
http://ftp.andrew.cmu.edu/pub/cyrus/cyrus-imspd-v1.6a4.tar.gz
ftp://ftp.andrew.cmu.edu/pub/cyrus/cyrus-imspd-v1.6a4.tar.gz

Cyrus IMSP Server 1.7a:
http://ftp.andrew.cmu.edu/pub/cyrus/cyrus-imspd-v1.7a.tar.gz
ftp://ftp.andrew.cmu.edu/pub/cyrus/cyrus-imspd-v1.7a.tar.gz

PROVIDED AND/OR DISCOVERED BY:
Felix Lindner and Michael Guenther of n.runs GmbH.

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://www.secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://www.secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]