• info
• discussion
• exploit
• solution
• references

MERCUR Messaging 2005 IMAP Remote Buffer Overflow Vulnerability

MERCUR Messaging 2005 is prone to a remote buffer-overflow vulnerability.

The vulnerability presents itself when the server handles specially crafted IMAP commands.

This may result in memory corruption leading to a denial-of-service condition or arbitrary code execution.

MERCUR Messaging 2005 version 5.0 SP3 is reported to be vulnerable. Other versions may be affected as well.