7.5 - VU#445313

Executive Summary

Summary
Title	602pro Lan Suite 2003 buffer overflow vulnerability

Informations
Name	VU#445313	First vendor Publication	2007-06-27
Vendor	VU-CERT	Last vendor Modification	2007-06-27
Severity (Vendor)	N/A	Revision	M

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score	7.5	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Vulnerability Note VU#445313

602pro Lan Suite 2003 buffer overflow vulnerability

Overview

602pro Lan Suite 2003 contains a buffer overflow vulnerability that may allow an attacker to execute code.

I. Description

602pro Lan Suite 2003 is a mail, firewall and proxy server that runs on the Microsoft Windows operating system.

The 602pro Lan Suite 2003 SMTP server contains a buffer overflow vulnerability. To exploit this vulnerability, an attacker would need to send a specially crafted email through the SMTP component of a vulnerable server.

II. Impact

A remote unauthenticated attacker may be able to execute arbitrary code, or create a denial-of-service condition.

III. Solution

Upgrade

The vendor has stated that this issue is addressed in 602 LAN Suite 2004.

Restrict access

Disabling or restricting access to the SMTP server will mitigate this vulnerability. See the 602pro Lan Suite 2003 administrator manual for details on how to configure the SMTP service.