漏洞描述
Multiple stack-based buffer overflows in YPOPs! (aka YahooPOPS) 0.4 through 0.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) POP3 USER command or (2) SMTP request.
影响产品
暂无结构化产品信息。
修复建议
建议关注厂商安全公告,及时升级至已修复版本,并结合实际资产暴露情况采取缓解措施。
参考链接
www.securityfocus.comhttp://www.securityfocus.com/bid/11256↗www.osvdb.orghttp://www.osvdb.org/10367↗www.osvdb.orghttp://www.osvdb.org/10366↗dbeusee.home.comcast.nethttp://dbeusee.home.comcast.net/history.html↗exchange.xforce.ibmcloud.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/17518↗exchange.xforce.ibmcloud.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/17515↗marc.infohttp://marc.info/?l=bugtraq&m=109630699829536&w=2↗www.hat-squad.comhttp://www.hat-squad.com/en/000075.html↗www.attrition.orghttp://www.attrition.org/pipermail/vim/2006-October/001089.html↗securitytracker.comhttp://securitytracker.com/alerts/2004/Sep/1011426.html↗secunia.comhttp://secunia.com/advisories/12660↗