Buffer overflow in aVirt Rover POP3 server 1.1 allows remote attackers to cause a denial of service via a long user name.

In version 4, a buffer overflow was introduced into the qpopper source tree. This buffer overflow is related to the handling of the client-supplied username and is present when a POP3 session is being initiated. It is believed that the overflow occurs before authentication, so it may not be required that users have valid POP accounts. This vulnerability can lead to a compromise of root privileges to remote attackers.

There are buffer overflow vulnerabilities present in 3.x versions of the Qualcomm popper daemon. These vulnerabilities are remotely executable and since the daemons run as root, the host running qpopper can be completely compromised anonymously.

The remote qpopper service may be vulnerable to a denial of service (DoS) attack. If a string of longer than approximately 2048 characters is sent to the qpopper process, a denial of service condition will occur.

Delegate is reportedly vulnerable to a stack-based buffer overflow that may allow for the execution of arbitrary code. The condition exists if the argument to the 'USER' command is of excessive length. 

The ZetaMail server will crash if a username/password pair longer than 3500 characters is supplied by the client.

The remote pop3 server seems vulnerable to a buffer overflow when issued a very long user name (10,000 chars)

This *may* allow an attacker to execute arbitrary commands as root on the remote POP3 server.

ID	Name	Product	Family	Severity
1794	Qualcomm Qpopper Username Remote Overflow	Nessus Network Monitor	POP Server	critical
1793	Qualcomm Qpopper Remote Overflows	Nessus Network Monitor	POP Server	critical
1792	Qualcomm Qpopper Remote Overflow DoS	Nessus Network Monitor	POP Server	critical
1791	Delegate Multiple Function Remote Overflows	Nessus Network Monitor	POP Server	critical
1790	ZetaMail Remote DoS	Nessus Network Monitor	POP Server	critical
10206	Rover POP3 Server Username Remote Overflow	Nessus	Gain a shell remotely	critical

Detections

Analytics

CVE-2000-0060

high

Tenable Plugins

critical

critical

critical

critical

critical

critical