PT-2006-1514 · Spa Pro+1 · Spa-Pro Mail @Solomon+1

Published 2006-01-27 · Updated 2017-07-20 · CVE-2006-0447

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions E-Post Mail Server version 4.10 SPA-PRO Mail @Solomon version 4.00

Description The issue allows remote attackers to execute arbitrary code via a long username to the "AUTH PLAIN" or "AUTH LOGIN" SMTP commands, which is not properly handled by the EPSTRS.EXE or SPA-RS.EXE executables. Additionally, a long username in the APOP POP3 command can be exploited due to improper handling by EPSTPOP4S.EXE or SPA-POP3S.EXE. A long IMAP DELETE command is also vulnerable due to improper handling by EPSTIMAP4S.EXE or SPA-IMAP4S.EXE.

Recommendations For E-Post Mail Server version 4.10, consider disabling the AUTH PLAIN and AUTH LOGIN SMTP commands until a patch is available. For SPA-PRO Mail @Solomon version 4.00, restrict access to the APOP POP3 command to minimize the risk of exploitation. As a temporary workaround, consider disabling the IMAP DELETE command for both E-Post Mail Server and SPA-PRO Mail @Solomon until a patch is available.

Fix

Related Identifiers

CVE-2006-0447

Affected Products

E-Post Mail Server

Spa-Pro Mail @Solomon

References · 11

• http://secunia.com/secunia_research/2006-1/advisory · Vendor Advisory
• http://secunia.com/advisories/18480 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0447 · Security Note
• http://osvdb.org/22763 · Note
• http://osvdb.org/22761 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24333 · Note
• http://vupen.com/english/advisories/2006/0318 · Note
• http://osvdb.org/22762 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24334 · Note
• http://securityfocus.com/bid/16379 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24331 · Note