----------------------------------------------------------------------

Want a new IT Security job?

Vacant positions at Secunia:
http://secunia.com/secunia_vacancies/

----------------------------------------------------------------------

TITLE:
NetWin DMail Server Two Vulnerabilities

SECUNIA ADVISORY ID:
SA15242

VERIFY ADVISORY:
http://secunia.com/advisories/15242/

CRITICAL:
Less critical

IMPACT:
Security Bypass, System access

WHERE:
>From remote

SOFTWARE:
NetWin DMail Server 3.x
http://secunia.com/product/5046/

DESCRIPTION:
Tan Chew Keong has reported two vulnerabilities in NetWin DMail
Server, which can be exploited by malicious people to bypass certain
security restrictions or potentially compromise a vulnerable system.

1) A design error in the mailing list service (dlist.exe) when
processing the sendlog command can be exploited by unauthenticated
people to bypass the authentication process.

This can further be exploited to stop the service or retrieve log
information.

2) Format string errors in the SMTP service (dsmtp.exe) when
processing administrative commands can be exploited to execute
arbitrary code on the system.

Successful exploitation of this vulnerability requires knowledge of
the administrative password.

The vulnerabilities have been reported in version 3.1a for Windows.
Other versions may also be affected.

SOLUTION:
Restrict access to the mailing list service and set a strong
administrative password.

PROVIDED AND/OR DISCOVERED BY:
Tan Chew Keong

ORIGINAL ADVISORY:
http://www.security.org.sg/vuln/dmail31a.html

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------