This application requires Javascript for optimal performance.

Ypops.Buffer.Overflow

Release Date

Jan 05, 2012

Severity

high

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Description

This indicates an attack attempt against a Buffer Overflow vulnerability in YahooPOPs.

The vulnerability is caused by an error when the vulnerable software handles a malicious SMTP request. It allows a remote attacker to execute arbitrary code via sending a crafted request.

Affected Products

YahooPOPS 0.4 through 0.6

Recommended Actions

Disable the SMTP service and enable the POP3 service to the loopback interface only.

Coverage

IPS
VCM

Common Vulnerabilities and Exposures (CVE)

CVE-2004-1558

Reference: VID-30502