Detections
Analytics

ISMail Multiple Command Domain Name Handling Remote Overflow

high Nessus Plugin ID 11272

Synopsis

The remote SMTP server is affected by a buffer overflow vulnerability.

Description

The remote SMTP server (probably ISMail) seems to be vulnerable to a buffer overflow which could allow an attacker to gain LOCALSYSTEM privileges on this host.

Solution

Upgrade to version 1.4.5 of ISMail

See Also

https://seclists.org/vulnwatch/2003/q1/97

Plugin Details

Severity: High

ID: 11272

File Name: ismail_overflow.nasl

Version: 1.17

Type: remote

Published: 2/27/2003

Updated: 11/15/2018

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

Exploit Ease: No known exploits are available

Reference Information

CVE: CVE-2003-1382

BID: 6972

CWE: 119