SMTP: Metamail Header Overflow 2

This signature detects SMTP messages with large headers that contain character set information. Metamail 2.7 and earlier versions are vulnerable. Because Metamail does not handle SMTP headers correctly, attackers can send maliciously crafted SMTP messages to execute arbitrary code at the same privilege level as the target (typically a user). Note: Systems that typically carry non-English e-mail messages should not include this attack object in their Security Policy.

Extended Description

Metamail has been reported prone to multiple vulnerabilities that may provide for arbitrary code execution. Two buffer overflow vulnerabilities have been reported to affect Metamail. Additionally, two format string-handling vulnerabilities have been reported. These issues may also be exploited by a remote attacker to execute arbitrary code.

Affected Products

Sgi propack

References

BugTraq: 9692

CVE: CVE-2004-0104

URL: http://www.kb.cert.org/vuls/id/518518

Short Name

SMTP:OVERFLOW:METAMAIL-HDR-OF2

Severity

Major

Recommended

False

Recommended Action

None

SMTP: Metamail Header Overflow 2

Extended Description

Affected Products

References

Found a potential security threat?