This host is installed with Eureka Email and is prone to stack-based buffer overflow vulnerability.

Successful exploitation allows remote attackers to crash an affected client or execute arbitrary code by tricking a user into connecting to a malicious POP3 server. Impact level: Application.

No solution or patch was made available for at least one year since disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one.

The flaw is due to a boundary error in the processing POP3 responses. This can be exploited to cause a stack-based buffer overflow via an overly long error response.

Eureka Email version 2.2q and prior.

• http://secunia.com/advisories/product/27632/
• http://www.packetstormsecurity.org/0910-exploits/eurekamc-dos.txt
• http://www.vupen.com/english/advisories/2009/3025
• http://xforce.iss.net/xforce/xfdb/53940

---

Updated on 2015-03-25