Becky! 2.00.05 Buffer Overflow

From: Ichinose Sayo (ichinoseat_private)
Date: Mon May 14 2001 - 01:01:31 PDT

Next message: Casper Dik: "Re: Solaris /usr/bin/mailx exploit (SPARC)"

Previous message: Cyrus The Great: "IIS5 .printer exploit ported to perl and win32"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi,
I found Buffer Overflow vulnerabilities in Becky! Internet Mail 2.00.05

Becky! Internet Mail is popular MUA (Mail User Agent) designed for 
Windows operating systems.

Problem Description
-------------------
If the message includes over 65536 bytes without new line characters, 
the buffer will be overflowed.

Buffer overflow also occurs when attempt to reply or forward to the 
message included over 8188 bytes without new line characters.

Successful exploitation of this vulnerability could allow remote 
attackers to execute arbitrary commands.

Tested Version:
----------------
Becky! Internet Mail ver 2.00.05
Becky! Internet Mail ver 2.00.03

Status of fixes: 
-----------------
Due to prompt response by the author, the version 2.00.06, which was 
fixed this problem, was published.

http://www.rimarts.co.jp/becky.htm

Web site that shows reproducing this vulnerability is available from:
http://www.lac.co.jp/security/english/test/becky2.html

Becky! Internet Mail Official Site:
------------------------------------
http://www.rimarts.co.jp/index.html


----
Sayo Ichinose<ichinoseat_private>
Computer Security Laboratory
LAC Co.,Ltd.
http://www.lac.co.jp/security/

Next message: Casper Dik: "Re: Solaris /usr/bin/mailx exploit (SPARC)"
Previous message: Cyrus The Great: "IIS5 .printer exploit ported to perl and win32"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Tue May 15 2001 - 00:25:14 PDT