SLWebMail Multiple Buffer Overflow Vulnerabilities

NGSSoftware Insight Security Research Advisory

Name: SLWebMail Multiple Buffer Overflow Vulnerabilities
Systems Affected: SLWebMail (Installed with SLMail Pro version 2.0.9 and earlier) on Windows.
Severity: High Risk
Vendor URL: http://www.slmail.com/
Author: David Litchfield [ david@ngssoftware.com ]
Date Vendor Notified:    13th January 2004
Date of Public Advisory: 5th March 2004
Advisory number: #NISR05022004b
Advisory URL: http://www.ngssoftware.com/advisories/slmailwm.txt

Description
***********
SLWebMail is a web based e-mail solution designed for the small to medium enterprise. SLWebMail runs
atop Microsoft’s Internet Information Server and is implemented as a set of ISAPI applications.
SLWebMail suffers from multiple buffer overflow vulnerabilities.

Details
*******
SLWebMail is installed with SLMail Pro. Implemented as a set of ISAPI applications, many suffer from
stack based buffer overflow vulnerabilities. Known to be vulnerable are user.dll, loadpageadmin.dll
and loadpageuser.dll. Even though these ISAPI applications are loaded into dllhost, which runs in the
security context of the IWAM account and not the local system account, the risk should still be
considered as high and customers should install the patch as soon as is possible.

Fix Information
***************
SLMail have made available a patch to resolve these issues:
http://216.26.170.92/Products/SLMailPro/Utilities.asp .
Customers are urged to update as soon as is possible.

About NGSSoftware
*****************
NGSSoftware design, research and develop intelligent, advanced application security assessment
scanners. Based in the United Kingdom, NGSSoftware have offices in the South of London and the East
Coast of Scotland. NGSSoftware’s sister company NGSConsulting, offers best of breed security consulting
services, specialising in application, host and network security assessments.

http://www.ngssoftware.com/

Telephone +44 208 401 0070
Fax +44 208 401 0076

enquiries@ngssoftware.com