SLWebMail Multiple Buffer Overflow Vulnerabilities (#NISR05022004b)
NGSSoftware Insight Security Research Advisory
Name: SLWebMail Multiple Buffer Overflow Vulnerabilities
Systems Affected: SLWebMail (Installed with SLMail Pro version 2.0.9 and
earlier) on Windows.
Severity: High Risk
Vendor URL: http://www.slmail.com/
Author: David Litchfield [ david@xxxxxxxxxxxxxxx ]
Date Vendor Notified: 13th January 2004
Date of Public Advisory: 5th March 2004
Advisory number: #NISR05022004b
Advisory URL: http://www.ngssoftware.com/advisories/slmailwm.txt
Description
***********
SLWebMail is a web based e-mail solution designed for the small to medium
enterprise. SLWebMail runs atop Microsoft's Internet Information Server and
is implemented as a set of ISAPI applications. SLWebMail suffers from
multiple buffer overflow vulnerabilities.
Details
*******
SLWebMail is installed with SLMail Pro. Implemented as a set of ISAPI
applications, many suffer from stack based buffer overflow vulnerabilities.
Known to be vulnerable are user.dll, loadpageadmin.dll and loadpageuser.dll.
Even though these ISAPI applications are loaded into dllhost, which runs in
the security context of the IWAM account and not the local system account,
the risk should still be considered as high and customers should install the
patch as soon as is possible.
Fix Information
***************
SLMail have made available a patch to resolve these issues:
http://216.26.170.92/Products/SLMailPro/Utilities.asp . Customers are urged
to update as soon as is possible.
About NGSSoftware
*****************
NGSSoftware design, research and develop intelligent, advanced application
security assessment scanners. Based in the United Kingdom, NGSSoftware have
offices in the South of London and the East Coast of Scotland. NGSSoftware's
sister company NGSConsulting, offers best of breed security consulting
services, specialising in application, host and network security
assessments.
http://www.ngssoftware.com/
Telephone +44 208 401 0070
Fax +44 208 401 0076
enquiries@xxxxxxxxxxxxxxx