Vulnerabilities > CVE-1999-1511 - DoS vulnerability in Artisoft Xtramail 1.11
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
Buffer overflows in Xtramail 1.11 allow attackers to cause a denial of service (crash) and possibly execute arbitrary commands via (1) a long PASS command in the POP3 service, (2) a long HELO command in the SMTP service, or (3) a long user name in the Control Service.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Nessus
NASL family SMTP problems NASL id XTRAMAIL_HELO.NASL description The remote host is running a version of XtraMail with a remote buffer overflow vulnerability. The overflow is caused by by issuing the last seen 2020-06-01 modified 2020-06-02 plugin id 10324 published 1999-11-10 reporter This script is Copyright (C) 1999-2018 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/10324 title XtraMail SMTP HELO Command Remote Overflow NASL family Misc. NASL id XTRAMAIL_CONTROL.NASL description The remote host is running a version of XtraMail with a remote buffer overflow vulnerability. XtraMail includes a remote administration utility which listens on port 32000 for logins. Providing a username of over 15,000 characters causes a buffer overflow, which could allow a remote attacker to crash the service or potentially execute arbitrary code. last seen 2020-06-01 modified 2020-06-02 plugin id 10323 published 1999-11-10 reporter This script is Copyright (C) 1999-2018 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/10323 title XtraMail Control Service Username Overflow NASL family Gain a shell remotely NASL id XTRAMAIL_POP_OVERFLOW.NASL description The remote POP3 server is vulnerable to the following buffer overflow : USER test PASS <buffer> This may allow an attacker to execute arbitrary commands as root on the remote POP3 server. last seen 2020-06-01 modified 2020-06-02 plugin id 10325 published 1999-11-10 reporter This script is Copyright (C) 1999-2018 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/10325 title XtraMail POP3 PASS Command Remote Overflow