MDaemon WorldClient 和WebConfig services的边界条件错误漏洞

漏洞ID	1105618	漏洞类型	边界条件错误
发布时间	1999-11-24	更新时间	2005-10-20
CVE编号	CVE-1999-0844	CNNVD-ID	CNNVD-199911-069
漏洞平台	Windows	CVSS评分	5.0

|漏洞来源

https://www.exploit-db.com/exploits/19639
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-199911-069

|漏洞详情

MDaemonWorldClient和WebConfigservices存在漏洞。可以通过长URL拒绝服务。

|漏洞EXP

source: http://www.securityfocus.com/bid/820/info

The Mdaemon mail server for Windows includes a small web server for web-based remote administration. This webserver is vulnerable due to an unchecked buffer that handles incoming GET requests. An abnormally large URL sent to the WebConfig service at port 2002 will crash the service.

https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/bin-sploits/19639-1.zip

https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/bin-sploits/19639-2.exe

|参考资料

来源:BID
名称:823
链接:http://www.securityfocus.com/bid/823
来源:BID
名称:820
链接:http://www.securityfocus.com/bid/820

相关推荐: 2Fax Tab Expansion Buffer Overflow Vulnerability

2Fax Tab Expansion Buffer Overflow Vulnerability 漏洞ID 1097516 漏洞类型 Boundary Condition Error 发布时间 2004-12-15 更新时间 2004-12-15 CVE编号 …