VULHUB ™

InetServ is a freeware mail server for 32 bit Windows systems. One of the features of this program is webmail, which allows mail to be read from any browser. There is an unchecked buffer in the code that parses the GET requests, and a request of 537 bytes or longer will overwrite the EIP register. This overflow can allow arbitrary code to be run on the machine by a remote attacker. There are also many other unchecked buffers in the code, each of which could potentially be exploited in this manner. It should be noted that the webmail interface is an optional feature of A-V Tronics InetServ, and is not enabled by default.

InetServ is a freeware mail server for 32 bit Windows systems. One of the features of this program is webmail, which allows mail to be read from any browser. There is an unchecked buffer in the code that parses the GET requests, and a request of 537 bytes or longer will overwrite the EIP register. This overflow can allow arbitrary code to be run on the machine by a remote attacker. There are also many other unchecked buffers in the code, each of which could potentially be exploited in this manner. It should be noted that the webmail interface is an optional feature of A-V Tronics InetServ, and is not enabled by default.