xfocus logo xfocus title
首页 焦点原创 安全文摘 安全工具 安全漏洞 焦点项目 焦点论坛 关于我们
English Version

Netwin CWMail 存在缓冲溢出漏洞


发布时间:2002-02-19
更新时间:2002-02-19
严重程度:
威胁程度:普通用户访问权限
错误类型:边界检查错误
利用方式:服务器模式

BUGTRAQ ID:4093

受影响系统
NetWin CWMail 2.7t
   - Apple MacOS X 10.0
   - BSDI BSD/OS 3.0
   - BSDI BSD/OS 4.0
   - Cobalt Linux 5.0
   - FreeBSD FreeBSD 2.2
   - FreeBSD FreeBSD 3.1
   - FreeBSD FreeBSD 4.0
   - HP HP-UX 11.0
   - IBM AIX 4.3
   - Linux libc 6.0
   - Microsoft Windows 2000 Advanced Server
   - Microsoft Windows 2000 Advanced Server SP1
   - Microsoft Windows 2000 Advanced Server SP2
   - Microsoft Windows 2000 Datacenter Server
   - Microsoft Windows 2000 Datacenter Server SP1
   - Microsoft Windows 2000 Datacenter Server SP2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows 2000 Server
   - Microsoft Windows 2000 Server SP1
   - Microsoft Windows 2000 Server SP2
   - Microsoft Windows 95
   - Microsoft Windows 98
   - Microsoft Windows NT Enterprise Server 4.0
   - Microsoft Windows NT Enterprise Server 4.0SP1
   - Microsoft Windows NT Enterprise Server 4.0SP2
   - Microsoft Windows NT Enterprise Server 4.0SP3
   - Microsoft Windows NT Enterprise Server 4.0SP4
   - Microsoft Windows NT Enterprise Server 4.0SP5
   - Microsoft Windows NT Enterprise Server 4.0SP6
   - Microsoft Windows NT Enterprise Server 4.0SP6a
   - Microsoft Windows NT Server 4.0
   - Microsoft Windows NT Server 4.0SP1
   - Microsoft Windows NT Server 4.0SP2
   - Microsoft Windows NT Server 4.0SP3
   - Microsoft Windows NT Server 4.0SP4
   - Microsoft Windows NT Server 4.0SP5
   - Microsoft Windows NT Server 4.0SP6
   - Microsoft Windows NT Server 4.0SP6a
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6
   - Microsoft Windows NT Workstation 4.0SP6a
   - NetBSD NetBSD 1.5
   - Sun Solaris 7.0
   - Sun Solaris 8.0
   - Sun SunOS 5.5
   - Sun SunOS 5.6
NetWin CWMail 2.7s
   - Apple MacOS X 10.0
   - BSDI BSD/OS 3.0
   - BSDI BSD/OS 4.0
   - Cobalt Linux 5.0
   - FreeBSD FreeBSD 2.2
   - FreeBSD FreeBSD 3.1
   - FreeBSD FreeBSD 4.0
   - HP HP-UX 11.0
   - IBM AIX 4.3
   - Linux libc 6.0
   - Microsoft Windows 2000 Advanced Server
   - Microsoft Windows 2000 Advanced Server SP1
   - Microsoft Windows 2000 Advanced Server SP2
   - Microsoft Windows 2000 Datacenter Server
   - Microsoft Windows 2000 Datacenter Server SP1
   - Microsoft Windows 2000 Datacenter Server SP2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows 2000 Server
   - Microsoft Windows 2000 Server SP1
   - Microsoft Windows 2000 Server SP2
   - Microsoft Windows 95
   - Microsoft Windows 98
   - Microsoft Windows NT Enterprise Server 4.0
   - Microsoft Windows NT Enterprise Server 4.0SP1
   - Microsoft Windows NT Enterprise Server 4.0SP2
   - Microsoft Windows NT Enterprise Server 4.0SP3
   - Microsoft Windows NT Enterprise Server 4.0SP4
   - Microsoft Windows NT Enterprise Server 4.0SP5
   - Microsoft Windows NT Enterprise Server 4.0SP6
   - Microsoft Windows NT Enterprise Server 4.0SP6a
   - Microsoft Windows NT Server 4.0
   - Microsoft Windows NT Server 4.0SP1
   - Microsoft Windows NT Server 4.0SP2
   - Microsoft Windows NT Server 4.0SP3
   - Microsoft Windows NT Server 4.0SP4
   - Microsoft Windows NT Server 4.0SP5
   - Microsoft Windows NT Server 4.0SP6
   - Microsoft Windows NT Server 4.0SP6a
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6
   - Microsoft Windows NT Workstation 4.0SP6a
   - NetBSD NetBSD 1.5
   - Sun Solaris 7.0
   - Sun Solaris 8.0
   - Sun SunOS 5.5
   - Sun SunOS 5.6
NetWin CWMail 2.7q
   - Apple MacOS X 10.0
   - BSDI BSD/OS 3.0
   - BSDI BSD/OS 4.0
   - Cobalt Linux 5.0
   - FreeBSD FreeBSD 2.2
   - FreeBSD FreeBSD 3.1
   - FreeBSD FreeBSD 4.0
   - HP HP-UX 11.0
   - IBM AIX 4.3
   - Linux libc 6.0
   - Microsoft Windows 2000 Advanced Server
   - Microsoft Windows 2000 Advanced Server SP1
   - Microsoft Windows 2000 Advanced Server SP2
   - Microsoft Windows 2000 Datacenter Server
   - Microsoft Windows 2000 Datacenter Server SP1
   - Microsoft Windows 2000 Datacenter Server SP2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows 2000 Server
   - Microsoft Windows 2000 Server SP1
   - Microsoft Windows 2000 Server SP2
   - Microsoft Windows 95
   - Microsoft Windows 98
   - Microsoft Windows NT Enterprise Server 4.0
   - Microsoft Windows NT Enterprise Server 4.0SP1
   - Microsoft Windows NT Enterprise Server 4.0SP2
   - Microsoft Windows NT Enterprise Server 4.0SP3
   - Microsoft Windows NT Enterprise Server 4.0SP4
   - Microsoft Windows NT Enterprise Server 4.0SP5
   - Microsoft Windows NT Enterprise Server 4.0SP6
   - Microsoft Windows NT Enterprise Server 4.0SP6a
   - Microsoft Windows NT Server 4.0
   - Microsoft Windows NT Server 4.0SP1
   - Microsoft Windows NT Server 4.0SP2
   - Microsoft Windows NT Server 4.0SP3
   - Microsoft Windows NT Server 4.0SP4
   - Microsoft Windows NT Server 4.0SP5
   - Microsoft Windows NT Server 4.0SP6
   - Microsoft Windows NT Server 4.0SP6a
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6
   - Microsoft Windows NT Workstation 4.0SP6a
   - NetBSD NetBSD 1.5
   - Sun Solaris 7.0
   - Sun Solaris 8.0
   - Sun SunOS 5.5
   - Sun SunOS 5.6
NetWin CWMail 2.7p
   - Apple MacOS X 10.0
   - BSDI BSD/OS 3.0
   - BSDI BSD/OS 4.0
   - Cobalt Linux 5.0
   - FreeBSD FreeBSD 2.2
   - FreeBSD FreeBSD 3.1
   - FreeBSD FreeBSD 4.0
   - HP HP-UX 11.0
   - IBM AIX 4.3
   - Linux libc 6.0
   - Microsoft Windows 2000 Advanced Server
   - Microsoft Windows 2000 Advanced Server SP1
   - Microsoft Windows 2000 Advanced Server SP2
   - Microsoft Windows 2000 Datacenter Server
   - Microsoft Windows 2000 Datacenter Server SP1
   - Microsoft Windows 2000 Datacenter Server SP2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows 2000 Server
   - Microsoft Windows 2000 Server SP1
   - Microsoft Windows 2000 Server SP2
   - Microsoft Windows 95
   - Microsoft Windows 98
   - Microsoft Windows NT Enterprise Server 4.0
   - Microsoft Windows NT Enterprise Server 4.0SP1
   - Microsoft Windows NT Enterprise Server 4.0SP2
   - Microsoft Windows NT Enterprise Server 4.0SP3
   - Microsoft Windows NT Enterprise Server 4.0SP4
   - Microsoft Windows NT Enterprise Server 4.0SP5
   - Microsoft Windows NT Enterprise Server 4.0SP6
   - Microsoft Windows NT Enterprise Server 4.0SP6a
   - Microsoft Windows NT Server 4.0
   - Microsoft Windows NT Server 4.0SP1
   - Microsoft Windows NT Server 4.0SP2
   - Microsoft Windows NT Server 4.0SP3
   - Microsoft Windows NT Server 4.0SP4
   - Microsoft Windows NT Server 4.0SP5
   - Microsoft Windows NT Server 4.0SP6
   - Microsoft Windows NT Server 4.0SP6a
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6
   - Microsoft Windows NT Workstation 4.0SP6a
   - NetBSD NetBSD 1.5
   - Sun Solaris 7.0
   - Sun Solaris 8.0
   - Sun SunOS 5.5
   - Sun SunOS 5.6
NetWin CWMail 2.7o
   - Apple MacOS X 10.0
   - BSDI BSD/OS 3.0
   - BSDI BSD/OS 4.0
   - Cobalt Linux 5.0
   - FreeBSD FreeBSD 2.2
   - FreeBSD FreeBSD 3.1
   - FreeBSD FreeBSD 4.0
   - HP HP-UX 11.0
   - IBM AIX 4.3
   - Linux libc 6.0
   - Microsoft Windows 2000 Advanced Server
   - Microsoft Windows 2000 Advanced Server SP1
   - Microsoft Windows 2000 Advanced Server SP2
   - Microsoft Windows 2000 Datacenter Server
   - Microsoft Windows 2000 Datacenter Server SP1
   - Microsoft Windows 2000 Datacenter Server SP2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows 2000 Server
   - Microsoft Windows 2000 Server SP1
   - Microsoft Windows 2000 Server SP2
   - Microsoft Windows 95
   - Microsoft Windows 98
   - Microsoft Windows NT Enterprise Server 4.0
   - Microsoft Windows NT Enterprise Server 4.0SP1
   - Microsoft Windows NT Enterprise Server 4.0SP2
   - Microsoft Windows NT Enterprise Server 4.0SP3
   - Microsoft Windows NT Enterprise Server 4.0SP4
   - Microsoft Windows NT Enterprise Server 4.0SP5
   - Microsoft Windows NT Enterprise Server 4.0SP6
   - Microsoft Windows NT Enterprise Server 4.0SP6a
   - Microsoft Windows NT Server 4.0
   - Microsoft Windows NT Server 4.0SP1
   - Microsoft Windows NT Server 4.0SP2
   - Microsoft Windows NT Server 4.0SP3
   - Microsoft Windows NT Server 4.0SP4
   - Microsoft Windows NT Server 4.0SP5
   - Microsoft Windows NT Server 4.0SP6
   - Microsoft Windows NT Server 4.0SP6a
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6
   - Microsoft Windows NT Workstation 4.0SP6a
   - NetBSD NetBSD 1.5
   - Sun Solaris 7.0
   - Sun Solaris 8.0
   - Sun SunOS 5.5
   - Sun SunOS 5.6
NetWin CWMail 2.7n
   - Apple MacOS X 10.0
   - BSDI BSD/OS 3.0
   - BSDI BSD/OS 4.0
   - Cobalt Linux 5.0
   - FreeBSD FreeBSD 2.2
   - FreeBSD FreeBSD 3.1
   - FreeBSD FreeBSD 4.0
   - HP HP-UX 11.0
   - IBM AIX 4.3
   - Linux libc 6.0
   - Microsoft Windows 2000 Advanced Server
   - Microsoft Windows 2000 Advanced Server SP1
   - Microsoft Windows 2000 Advanced Server SP2
   - Microsoft Windows 2000 Datacenter Server
   - Microsoft Windows 2000 Datacenter Server SP1
   - Microsoft Windows 2000 Datacenter Server SP2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows 2000 Server
   - Microsoft Windows 2000 Server SP1
   - Microsoft Windows 2000 Server SP2
   - Microsoft Windows 95
   - Microsoft Windows 98
   - Microsoft Windows NT Enterprise Server 4.0
   - Microsoft Windows NT Enterprise Server 4.0SP1
   - Microsoft Windows NT Enterprise Server 4.0SP2
   - Microsoft Windows NT Enterprise Server 4.0SP3
   - Microsoft Windows NT Enterprise Server 4.0SP4
   - Microsoft Windows NT Enterprise Server 4.0SP5
   - Microsoft Windows NT Enterprise Server 4.0SP6
   - Microsoft Windows NT Enterprise Server 4.0SP6a
   - Microsoft Windows NT Server 4.0
   - Microsoft Windows NT Server 4.0SP1
   - Microsoft Windows NT Server 4.0SP2
   - Microsoft Windows NT Server 4.0SP3
   - Microsoft Windows NT Server 4.0SP4
   - Microsoft Windows NT Server 4.0SP5
   - Microsoft Windows NT Server 4.0SP6
   - Microsoft Windows NT Server 4.0SP6a
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6
   - Microsoft Windows NT Workstation 4.0SP6a
   - NetBSD NetBSD 1.5
   - Sun Solaris 7.0
   - Sun Solaris 8.0
   - Sun SunOS 5.5
   - Sun SunOS 5.6
NetWin CWMail 2.7m
   - Apple MacOS X 10.0
   - BSDI BSD/OS 3.0
   - BSDI BSD/OS 4.0
   - Cobalt Linux 5.0
   - FreeBSD FreeBSD 2.2
   - FreeBSD FreeBSD 3.1
   - FreeBSD FreeBSD 4.0
   - HP HP-UX 11.0
   - IBM AIX 4.3
   - Linux libc 6.0
   - Microsoft Windows 2000 Advanced Server
   - Microsoft Windows 2000 Advanced Server SP1
   - Microsoft Windows 2000 Advanced Server SP2
   - Microsoft Windows 2000 Datacenter Server
   - Microsoft Windows 2000 Datacenter Server SP1
   - Microsoft Windows 2000 Datacenter Server SP2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows 2000 Server
   - Microsoft Windows 2000 Server SP1
   - Microsoft Windows 2000 Server SP2
   - Microsoft Windows 95
   - Microsoft Windows 98
   - Microsoft Windows NT Enterprise Server 4.0
   - Microsoft Windows NT Enterprise Server 4.0SP1
   - Microsoft Windows NT Enterprise Server 4.0SP2
   - Microsoft Windows NT Enterprise Server 4.0SP3
   - Microsoft Windows NT Enterprise Server 4.0SP4
   - Microsoft Windows NT Enterprise Server 4.0SP5
   - Microsoft Windows NT Enterprise Server 4.0SP6
   - Microsoft Windows NT Enterprise Server 4.0SP6a
   - Microsoft Windows NT Server 4.0
   - Microsoft Windows NT Server 4.0SP1
   - Microsoft Windows NT Server 4.0SP2
   - Microsoft Windows NT Server 4.0SP3
   - Microsoft Windows NT Server 4.0SP4
   - Microsoft Windows NT Server 4.0SP5
   - Microsoft Windows NT Server 4.0SP6
   - Microsoft Windows NT Server 4.0SP6a
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6
   - Microsoft Windows NT Workstation 4.0SP6a
   - NetBSD NetBSD 1.5
   - Sun Solaris 7.0
   - Sun Solaris 8.0
   - Sun SunOS 5.5
   - Sun SunOS 5.6
NetWin CWMail 2.7l
   - Apple MacOS X 10.0
   - BSDI BSD/OS 3.0
   - BSDI BSD/OS 4.0
   - Cobalt Linux 5.0
   - FreeBSD FreeBSD 2.2
   - FreeBSD FreeBSD 3.1
   - FreeBSD FreeBSD 4.0
   - HP HP-UX 11.0
   - IBM AIX 4.3
   - Linux libc 6.0
   - Microsoft Windows 2000 Advanced Server
   - Microsoft Windows 2000 Advanced Server SP1
   - Microsoft Windows 2000 Advanced Server SP2
   - Microsoft Windows 2000 Datacenter Server
   - Microsoft Windows 2000 Datacenter Server SP1
   - Microsoft Windows 2000 Datacenter Server SP2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows 2000 Server
   - Microsoft Windows 2000 Server SP1
   - Microsoft Windows 2000 Server SP2
   - Microsoft Windows 95
   - Microsoft Windows 98
   - Microsoft Windows NT Enterprise Server 4.0
   - Microsoft Windows NT Enterprise Server 4.0SP1
   - Microsoft Windows NT Enterprise Server 4.0SP2
   - Microsoft Windows NT Enterprise Server 4.0SP3
   - Microsoft Windows NT Enterprise Server 4.0SP4
   - Microsoft Windows NT Enterprise Server 4.0SP5
   - Microsoft Windows NT Enterprise Server 4.0SP6
   - Microsoft Windows NT Enterprise Server 4.0SP6a
   - Microsoft Windows NT Server 4.0
   - Microsoft Windows NT Server 4.0SP1
   - Microsoft Windows NT Server 4.0SP2
   - Microsoft Windows NT Server 4.0SP3
   - Microsoft Windows NT Server 4.0SP4
   - Microsoft Windows NT Server 4.0SP5
   - Microsoft Windows NT Server 4.0SP6
   - Microsoft Windows NT Server 4.0SP6a
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6
   - Microsoft Windows NT Workstation 4.0SP6a
   - NetBSD NetBSD 1.5
   - Sun Solaris 7.0
   - Sun Solaris 8.0
   - Sun SunOS 5.5
   - Sun SunOS 5.6
NetWin CWMail 2.7k
   - Apple MacOS X 10.0
   - BSDI BSD/OS 3.0
   - BSDI BSD/OS 4.0
   - Cobalt Linux 5.0
   - FreeBSD FreeBSD 2.2
   - FreeBSD FreeBSD 3.1
   - FreeBSD FreeBSD 4.0
   - HP HP-UX 11.0
   - IBM AIX 4.3
   - Linux libc 6.0
   - Microsoft Windows 2000 Advanced Server
   - Microsoft Windows 2000 Advanced Server SP1
   - Microsoft Windows 2000 Advanced Server SP2
   - Microsoft Windows 2000 Datacenter Server
   - Microsoft Windows 2000 Datacenter Server SP1
   - Microsoft Windows 2000 Datacenter Server SP2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows 2000 Server
   - Microsoft Windows 2000 Server SP1
   - Microsoft Windows 2000 Server SP2
   - Microsoft Windows 95
   - Microsoft Windows 98
   - Microsoft Windows NT Enterprise Server 4.0
   - Microsoft Windows NT Enterprise Server 4.0SP1
   - Microsoft Windows NT Enterprise Server 4.0SP2
   - Microsoft Windows NT Enterprise Server 4.0SP3
   - Microsoft Windows NT Enterprise Server 4.0SP4
   - Microsoft Windows NT Enterprise Server 4.0SP5
   - Microsoft Windows NT Enterprise Server 4.0SP6
   - Microsoft Windows NT Enterprise Server 4.0SP6a
   - Microsoft Windows NT Server 4.0
   - Microsoft Windows NT Server 4.0SP1
   - Microsoft Windows NT Server 4.0SP2
   - Microsoft Windows NT Server 4.0SP3
   - Microsoft Windows NT Server 4.0SP4
   - Microsoft Windows NT Server 4.0SP5
   - Microsoft Windows NT Server 4.0SP6
   - Microsoft Windows NT Server 4.0SP6a
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6
   - Microsoft Windows NT Workstation 4.0SP6a
   - NetBSD NetBSD 1.5
   - Sun Solaris 7.0
   - Sun Solaris 8.0
   - Sun SunOS 5.5
   - Sun SunOS 5.6
NetWin CWMail 2.7j
   - Apple MacOS X 10.0
   - BSDI BSD/OS 3.0
   - BSDI BSD/OS 4.0
   - Cobalt Linux 5.0
   - FreeBSD FreeBSD 2.2
   - FreeBSD FreeBSD 3.1
   - FreeBSD FreeBSD 4.0
   - HP HP-UX 11.0
   - IBM AIX 4.3
   - Linux libc 6.0
   - Microsoft Windows 2000 Advanced Server
   - Microsoft Windows 2000 Advanced Server SP1
   - Microsoft Windows 2000 Advanced Server SP2
   - Microsoft Windows 2000 Datacenter Server
   - Microsoft Windows 2000 Datacenter Server SP1
   - Microsoft Windows 2000 Datacenter Server SP2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows 2000 Server
   - Microsoft Windows 2000 Server SP1
   - Microsoft Windows 2000 Server SP2
   - Microsoft Windows 95
   - Microsoft Windows 98
   - Microsoft Windows NT Enterprise Server 4.0
   - Microsoft Windows NT Enterprise Server 4.0SP1
   - Microsoft Windows NT Enterprise Server 4.0SP2
   - Microsoft Windows NT Enterprise Server 4.0SP3
   - Microsoft Windows NT Enterprise Server 4.0SP4
   - Microsoft Windows NT Enterprise Server 4.0SP5
   - Microsoft Windows NT Enterprise Server 4.0SP6
   - Microsoft Windows NT Enterprise Server 4.0SP6a
   - Microsoft Windows NT Server 4.0
   - Microsoft Windows NT Server 4.0SP1
   - Microsoft Windows NT Server 4.0SP2
   - Microsoft Windows NT Server 4.0SP3
   - Microsoft Windows NT Server 4.0SP4
   - Microsoft Windows NT Server 4.0SP5
   - Microsoft Windows NT Server 4.0SP6
   - Microsoft Windows NT Server 4.0SP6a
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6
   - Microsoft Windows NT Workstation 4.0SP6a
   - NetBSD NetBSD 1.5
   - Sun Solaris 7.0
   - Sun Solaris 8.0
   - Sun SunOS 5.5
   - Sun SunOS 5.6
NetWin CWMail 2.7i
   - Apple MacOS X 10.0
   - BSDI BSD/OS 3.0
   - BSDI BSD/OS 4.0
   - Cobalt Linux 5.0
   - FreeBSD FreeBSD 2.2
   - FreeBSD FreeBSD 3.1
   - FreeBSD FreeBSD 4.0
   - HP HP-UX 11.0
   - IBM AIX 4.3
   - Linux libc 6.0
   - Microsoft Windows 2000 Advanced Server
   - Microsoft Windows 2000 Advanced Server SP1
   - Microsoft Windows 2000 Advanced Server SP2
   - Microsoft Windows 2000 Datacenter Server
   - Microsoft Windows 2000 Datacenter Server SP1
   - Microsoft Windows 2000 Datacenter Server SP2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows 2000 Server
   - Microsoft Windows 2000 Server SP1
   - Microsoft Windows 2000 Server SP2
   - Microsoft Windows 95
   - Microsoft Windows 98
   - Microsoft Windows NT Enterprise Server 4.0
   - Microsoft Windows NT Enterprise Server 4.0SP1
   - Microsoft Windows NT Enterprise Server 4.0SP2
   - Microsoft Windows NT Enterprise Server 4.0SP3
   - Microsoft Windows NT Enterprise Server 4.0SP4
   - Microsoft Windows NT Enterprise Server 4.0SP5
   - Microsoft Windows NT Enterprise Server 4.0SP6
   - Microsoft Windows NT Enterprise Server 4.0SP6a
   - Microsoft Windows NT Server 4.0
   - Microsoft Windows NT Server 4.0SP1
   - Microsoft Windows NT Server 4.0SP2
   - Microsoft Windows NT Server 4.0SP3
   - Microsoft Windows NT Server 4.0SP4
   - Microsoft Windows NT Server 4.0SP5
   - Microsoft Windows NT Server 4.0SP6
   - Microsoft Windows NT Server 4.0SP6a
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6
   - Microsoft Windows NT Workstation 4.0SP6a
   - NetBSD NetBSD 1.5
   - Sun Solaris 7.0
   - Sun Solaris 8.0
   - Sun SunOS 5.5
   - Sun SunOS 5.6
NetWin CWMail 2.7f
   - Apple MacOS X 10.0
   - BSDI BSD/OS 3.0
   - BSDI BSD/OS 4.0
   - Cobalt Linux 5.0
   - FreeBSD FreeBSD 2.2
   - FreeBSD FreeBSD 3.1
   - FreeBSD FreeBSD 4.0
   - HP HP-UX 11.0
   - IBM AIX 4.3
   - Linux libc 6.0
   - Microsoft Windows 2000 Advanced Server
   - Microsoft Windows 2000 Advanced Server SP1
   - Microsoft Windows 2000 Advanced Server SP2
   - Microsoft Windows 2000 Datacenter Server
   - Microsoft Windows 2000 Datacenter Server SP1
   - Microsoft Windows 2000 Datacenter Server SP2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows 2000 Server
   - Microsoft Windows 2000 Server SP1
   - Microsoft Windows 2000 Server SP2
   - Microsoft Windows 95
   - Microsoft Windows 98
   - Microsoft Windows NT Enterprise Server 4.0
   - Microsoft Windows NT Enterprise Server 4.0SP1
   - Microsoft Windows NT Enterprise Server 4.0SP2
   - Microsoft Windows NT Enterprise Server 4.0SP3
   - Microsoft Windows NT Enterprise Server 4.0SP4
   - Microsoft Windows NT Enterprise Server 4.0SP5
   - Microsoft Windows NT Enterprise Server 4.0SP6
   - Microsoft Windows NT Enterprise Server 4.0SP6a
   - Microsoft Windows NT Server 4.0
   - Microsoft Windows NT Server 4.0SP1
   - Microsoft Windows NT Server 4.0SP2
   - Microsoft Windows NT Server 4.0SP3
   - Microsoft Windows NT Server 4.0SP4
   - Microsoft Windows NT Server 4.0SP5
   - Microsoft Windows NT Server 4.0SP6
   - Microsoft Windows NT Server 4.0SP6a
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6
   - Microsoft Windows NT Workstation 4.0SP6a
   - NetBSD NetBSD 1.5
   - Sun Solaris 7.0
   - Sun Solaris 8.0
   - Sun SunOS 5.5
   - Sun SunOS 5.6
NetWin CWMail 2.7d
   - Apple MacOS X 10.0
   - BSDI BSD/OS 3.0
   - BSDI BSD/OS 4.0
   - Cobalt Linux 5.0
   - FreeBSD FreeBSD 2.2
   - FreeBSD FreeBSD 3.1
   - FreeBSD FreeBSD 4.0
   - HP HP-UX 11.0
   - IBM AIX 4.3
   - Linux libc 6.0
   - Microsoft Windows 2000 Advanced Server
   - Microsoft Windows 2000 Advanced Server SP1
   - Microsoft Windows 2000 Advanced Server SP2
   - Microsoft Windows 2000 Datacenter Server
   - Microsoft Windows 2000 Datacenter Server SP1
   - Microsoft Windows 2000 Datacenter Server SP2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows 2000 Server
   - Microsoft Windows 2000 Server SP1
   - Microsoft Windows 2000 Server SP2
   - Microsoft Windows 95
   - Microsoft Windows 98
   - Microsoft Windows NT Enterprise Server 4.0
   - Microsoft Windows NT Enterprise Server 4.0SP1
   - Microsoft Windows NT Enterprise Server 4.0SP2
   - Microsoft Windows NT Enterprise Server 4.0SP3
   - Microsoft Windows NT Enterprise Server 4.0SP4
   - Microsoft Windows NT Enterprise Server 4.0SP5
   - Microsoft Windows NT Enterprise Server 4.0SP6
   - Microsoft Windows NT Enterprise Server 4.0SP6a
   - Microsoft Windows NT Server 4.0
   - Microsoft Windows NT Server 4.0SP1
   - Microsoft Windows NT Server 4.0SP2
   - Microsoft Windows NT Server 4.0SP3
   - Microsoft Windows NT Server 4.0SP4
   - Microsoft Windows NT Server 4.0SP5
   - Microsoft Windows NT Server 4.0SP6
   - Microsoft Windows NT Server 4.0SP6a
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6
   - Microsoft Windows NT Workstation 4.0SP6a
   - NetBSD NetBSD 1.5
   - Sun Solaris 7.0
   - Sun Solaris 8.0
   - Sun SunOS 5.5
   - Sun SunOS 5.6
NetWin CWMail 2.7c
   - Apple MacOS X 10.0
   - BSDI BSD/OS 3.0
   - BSDI BSD/OS 4.0
   - Cobalt Linux 5.0
   - FreeBSD FreeBSD 2.2
   - FreeBSD FreeBSD 3.1
   - FreeBSD FreeBSD 4.0
   - HP HP-UX 11.0
   - IBM AIX 4.3
   - Linux libc 6.0
   - Microsoft Windows 2000 Advanced Server
   - Microsoft Windows 2000 Advanced Server SP1
   - Microsoft Windows 2000 Advanced Server SP2
   - Microsoft Windows 2000 Datacenter Server
   - Microsoft Windows 2000 Datacenter Server SP1
   - Microsoft Windows 2000 Datacenter Server SP2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows 2000 Server
   - Microsoft Windows 2000 Server SP1
   - Microsoft Windows 2000 Server SP2
   - Microsoft Windows 95
   - Microsoft Windows 98
   - Microsoft Windows NT Enterprise Server 4.0
   - Microsoft Windows NT Enterprise Server 4.0SP1
   - Microsoft Windows NT Enterprise Server 4.0SP2
   - Microsoft Windows NT Enterprise Server 4.0SP3
   - Microsoft Windows NT Enterprise Server 4.0SP4
   - Microsoft Windows NT Enterprise Server 4.0SP5
   - Microsoft Windows NT Enterprise Server 4.0SP6
   - Microsoft Windows NT Enterprise Server 4.0SP6a
   - Microsoft Windows NT Server 4.0
   - Microsoft Windows NT Server 4.0SP1
   - Microsoft Windows NT Server 4.0SP2
   - Microsoft Windows NT Server 4.0SP3
   - Microsoft Windows NT Server 4.0SP4
   - Microsoft Windows NT Server 4.0SP5
   - Microsoft Windows NT Server 4.0SP6
   - Microsoft Windows NT Server 4.0SP6a
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6
   - Microsoft Windows NT Workstation 4.0SP6a
   - NetBSD NetBSD 1.5
   - Sun Solaris 7.0
   - Sun Solaris 8.0
   - Sun SunOS 5.5
   - Sun SunOS 5.6
NetWin CWMail 2.7b
   - Apple MacOS X 10.0
   - BSDI BSD/OS 3.0
   - BSDI BSD/OS 4.0
   - Cobalt Linux 5.0
   - FreeBSD FreeBSD 2.2
   - FreeBSD FreeBSD 3.1
   - FreeBSD FreeBSD 4.0
   - HP HP-UX 11.0
   - IBM AIX 4.3
   - Linux libc 6.0
   - Microsoft Windows 2000 Advanced Server
   - Microsoft Windows 2000 Advanced Server SP1
   - Microsoft Windows 2000 Advanced Server SP2
   - Microsoft Windows 2000 Datacenter Server
   - Microsoft Windows 2000 Datacenter Server SP1
   - Microsoft Windows 2000 Datacenter Server SP2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows 2000 Server
   - Microsoft Windows 2000 Server SP1
   - Microsoft Windows 2000 Server SP2
   - Microsoft Windows 95
   - Microsoft Windows 98
   - Microsoft Windows NT Enterprise Server 4.0
   - Microsoft Windows NT Enterprise Server 4.0SP1
   - Microsoft Windows NT Enterprise Server 4.0SP2
   - Microsoft Windows NT Enterprise Server 4.0SP3
   - Microsoft Windows NT Enterprise Server 4.0SP4
   - Microsoft Windows NT Enterprise Server 4.0SP5
   - Microsoft Windows NT Enterprise Server 4.0SP6
   - Microsoft Windows NT Enterprise Server 4.0SP6a
   - Microsoft Windows NT Server 4.0
   - Microsoft Windows NT Server 4.0SP1
   - Microsoft Windows NT Server 4.0SP2
   - Microsoft Windows NT Server 4.0SP3
   - Microsoft Windows NT Server 4.0SP4
   - Microsoft Windows NT Server 4.0SP5
   - Microsoft Windows NT Server 4.0SP6
   - Microsoft Windows NT Server 4.0SP6a
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6
   - Microsoft Windows NT Workstation 4.0SP6a
   - NetBSD NetBSD 1.5
   - Sun Solaris 7.0
   - Sun Solaris 8.0
   - Sun SunOS 5.5
   - Sun SunOS 5.6
NetWin CWMail 2.7a
   - Apple MacOS X 10.0
   - BSDI BSD/OS 3.0
   - BSDI BSD/OS 4.0
   - Cobalt Linux 5.0
   - FreeBSD FreeBSD 2.2
   - FreeBSD FreeBSD 3.1
   - FreeBSD FreeBSD 4.0
   - HP HP-UX 11.0
   - IBM AIX 4.3
   - Linux libc 6.0
   - Microsoft Windows 2000 Advanced Server
   - Microsoft Windows 2000 Advanced Server SP1
   - Microsoft Windows 2000 Advanced Server SP2
   - Microsoft Windows 2000 Datacenter Server
   - Microsoft Windows 2000 Datacenter Server SP1
   - Microsoft Windows 2000 Datacenter Server SP2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows 2000 Server
   - Microsoft Windows 2000 Server SP1
   - Microsoft Windows 2000 Server SP2
   - Microsoft Windows 95
   - Microsoft Windows 98
   - Microsoft Windows NT Enterprise Server 4.0
   - Microsoft Windows NT Enterprise Server 4.0SP1
   - Microsoft Windows NT Enterprise Server 4.0SP2
   - Microsoft Windows NT Enterprise Server 4.0SP3
   - Microsoft Windows NT Enterprise Server 4.0SP4
   - Microsoft Windows NT Enterprise Server 4.0SP5
   - Microsoft Windows NT Enterprise Server 4.0SP6
   - Microsoft Windows NT Enterprise Server 4.0SP6a
   - Microsoft Windows NT Server 4.0
   - Microsoft Windows NT Server 4.0SP1
   - Microsoft Windows NT Server 4.0SP2
   - Microsoft Windows NT Server 4.0SP3
   - Microsoft Windows NT Server 4.0SP4
   - Microsoft Windows NT Server 4.0SP5
   - Microsoft Windows NT Server 4.0SP6
   - Microsoft Windows NT Server 4.0SP6a
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6
   - Microsoft Windows NT Workstation 4.0SP6a
   - NetBSD NetBSD 1.5
   - Sun Solaris 7.0
   - Sun Solaris 8.0
   - Sun SunOS 5.5
   - Sun SunOS 5.6
NetWin CWMail 2.7
   - Apple MacOS X 10.0
   - BSDI BSD/OS 3.0
   - BSDI BSD/OS 4.0
   - Cobalt Linux 5.0
   - FreeBSD FreeBSD 2.2
   - FreeBSD FreeBSD 3.1
   - FreeBSD FreeBSD 4.0
   - HP HP-UX 11.0
   - IBM AIX 4.3
   - Linux libc 6.0
   - Microsoft Windows 2000 Advanced Server
   - Microsoft Windows 2000 Advanced Server SP1
   - Microsoft Windows 2000 Advanced Server SP2
   - Microsoft Windows 2000 Datacenter Server
   - Microsoft Windows 2000 Datacenter Server SP1
   - Microsoft Windows 2000 Datacenter Server SP2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows 2000 Server
   - Microsoft Windows 2000 Server SP1
   - Microsoft Windows 2000 Server SP2
   - Microsoft Windows 95
   - Microsoft Windows 98
   - Microsoft Windows NT Enterprise Server 4.0
   - Microsoft Windows NT Enterprise Server 4.0SP1
   - Microsoft Windows NT Enterprise Server 4.0SP2
   - Microsoft Windows NT Enterprise Server 4.0SP3
   - Microsoft Windows NT Enterprise Server 4.0SP4
   - Microsoft Windows NT Enterprise Server 4.0SP5
   - Microsoft Windows NT Enterprise Server 4.0SP6
   - Microsoft Windows NT Enterprise Server 4.0SP6a
   - Microsoft Windows NT Server 4.0
   - Microsoft Windows NT Server 4.0SP1
   - Microsoft Windows NT Server 4.0SP2
   - Microsoft Windows NT Server 4.0SP3
   - Microsoft Windows NT Server 4.0SP4
   - Microsoft Windows NT Server 4.0SP5
   - Microsoft Windows NT Server 4.0SP6
   - Microsoft Windows NT Server 4.0SP6a
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6
   - Microsoft Windows NT Workstation 4.0SP6a
   - NetBSD NetBSD 1.5
   - Sun Solaris 7.0
   - Sun Solaris 8.0
   - Sun SunOS 5.5
   - Sun SunOS 5.6
详细描述
CWMail 是一款基于WEB的EMAIL系统。

其中存在漏洞可以导致缓冲溢出,CWMAIL没有正确检查在'item='参数中的字节
大小,用户可以提交超长字符而导致缓冲溢出,并可以以NOBODY用户执行任意代码。

测试代码
尚无

解决方案
请下载2.8a版本:

http://netwinsite.com/dmailweb/download.htm

相关信息
参考:http://www.securityfocus.com/archive/1/255918
相关主页:http://netwinsite.com/support.htm