|
|
Ipswitch IMail Server LDAP缓冲溢出漏洞
发布时间：2002-05-23
更新时间：2002-05-23
严重程度：高
威胁程度：远程管理员权限
错误类型：边界检查错误
利用方式：服务器模式
BUGTRAQ ID：4780
受影响系统Ipswitch IMail 5.0
- Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP6a
Ipswitch IMail 5.0.5
+ Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP6a
Ipswitch IMail 5.0.6
+ Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP6a
Ipswitch IMail 5.0.7
+ Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP6a
Ipswitch IMail 5.0.8
- Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP6a
Ipswitch IMail 6.0
- Microsoft Windows NT 3.5.1
- Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP6a
Ipswitch IMail 6.0.1
- Microsoft Windows 2000 Workstation
- Microsoft Windows 2000 Workstation SP1
- Microsoft Windows 2000 Workstation SP2
- Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP6a
Ipswitch IMail 6.0.2
- Microsoft Windows 2000 Workstation
- Microsoft Windows 2000 Workstation SP1
- Microsoft Windows 2000 Workstation SP2
- Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP6a
Ipswitch IMail 6.0.3
- Microsoft Windows 2000 Workstation
- Microsoft Windows NT 4.0
Ipswitch IMail 6.0.4
- Microsoft Windows 2000 Workstation
- Microsoft Windows NT 4.0
Ipswitch IMail 6.0.5
- Microsoft Windows 2000 Workstation
- Microsoft Windows NT 4.0
Ipswitch IMail 6.0.6
- Microsoft Windows 2000 Workstation
- Microsoft Windows NT 4.0
Ipswitch IMail 6.1
- Microsoft Windows 2000 Workstation
- Microsoft Windows 2000 Workstation SP1
- Microsoft Windows 2000 Workstation SP2
- Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP6a
Ipswitch IMail 6.2
- Microsoft Windows 2000 Workstation
- Microsoft Windows 2000 Workstation SP1
- Microsoft Windows 2000 Workstation SP2
- Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP6a
Ipswitch IMail 6.3
Ipswitch IMail 6.4
Ipswitch IMail 7.0.1
Ipswitch IMail 7.0.2
Ipswitch IMail 7.0.3
Ipswitch IMail 7.0.4
- Microsoft Windows 2000 Workstation
- Microsoft Windows 2000 Workstation SP1
- Microsoft Windows 2000 Workstation SP2
- Microsoft Windows 2000 Workstation SP3
- Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP6a
Ipswitch IMail 7.0.5
- Microsoft Windows 2000 Professional
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Professional SP2
- Microsoft Windows NT Workstation 4.0
- Microsoft Windows NT Workstation 4.0 SP1
- Microsoft Windows NT Workstation 4.0 SP2
- Microsoft Windows NT Workstation 4.0 SP3
- Microsoft Windows NT Workstation 4.0 SP4
- Microsoft Windows NT Workstation 4.0 SP5
- Microsoft Windows NT Workstation 4.0 SP6a
- Microsoft Windows XP Home
Ipswitch IMail 7.0.6
- Microsoft Windows 2000 Professional
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Professional SP2
- Microsoft Windows NT Workstation 4.0
- Microsoft Windows NT Workstation 4.0 SP1
- Microsoft Windows NT Workstation 4.0 SP2
- Microsoft Windows NT Workstation 4.0 SP3
- Microsoft Windows NT Workstation 4.0 SP4
- Microsoft Windows NT Workstation 4.0 SP5
- Microsoft Windows NT Workstation 4.0 SP6a
- Microsoft Windows XP Home
Ipswitch IMail 7.0.7
Ipswitch IMail 7.1 详细描述
Ipswitch IMail是基于WEB的邮件服务程序，包含LDAP支持IMAIL的目录访问。
当攻击者使用简单认证模式来通过服务器验证时，需要提供"bind DN"和密码，如果提供超长的参数给"bind DN"并发送的情况下，可导致服务器出现缓冲溢出，存在以SYSTEM权限执行任意代码的可能。
测试代码
尚无
解决方案
补丁下载：
Ipswitch IMail 5.0:
Ipswitch IMail 5.0.5:
Ipswitch IMail 5.0.6:
Ipswitch IMail 5.0.7:
Ipswitch IMail 5.0.8:
Ipswitch IMail 6.0:
Ipswitch IMail 6.0.1:
Ipswitch IMail 6.0.2:
Ipswitch IMail 6.0.3:
Ipswitch IMail 6.0.4:
Ipswitch IMail 6.0.5:
Ipswitch IMail 6.0.6:
Ipswitch IMail 6.1:
Ipswitch IMail 6.2:
Ipswitch IMail 6.3:
Ipswitch IMail 6.4:
Ipswitch IMail 7.0.1:
Ipswitch IMail 7.0.2:
Ipswitch IMail 7.0.3:
Ipswitch IMail 7.0.4:
Ipswitch IMail 7.0.5:
Ipswitch IMail 7.0.6:
Ipswitch IMail 7.0.7:
Ipswitch IMail 7.1:
Ipswitch Hotfix IM710HF1.exe
ftp://ftp.ipswitch.com/Ipswitch/Product_Support/IMail/IM710HF1.exe
请升级到7.1版本后使用。
相关信息
Foundstone Labs <labs@foundstone.com>.
参考：http://online.securityfocus.com/archive/1/273250
相关主页：http://www.ipswitch.com/products/IMail_Server/index.asp
http://www.ipswitch.com/Support/IMail/patch-upgrades.html
|
