| Vulnerability Details | POP3 and IMAP4 are both 'pull' protocols. To check for messages, a client (e.g. Outlook Express) connects to its mail server and using the different protocols (POP3 or IMAP4), logins to its mailbox and 'pulls' out its messages. POP3 allows the remote client to view, download, list and delete messages, while IMAP4 is more advanced in that it permits manipulation of remote message folders (mailboxes), in a way that is functionally equivalent to local mailboxes. IMAP4 also includes operations for creating, deleting, and renaming mailboxes; checking for new messages; permanently removing messages and more.
There are different attack vectors against POP3 and IMAP4 mail servers. A malicious attacker can create a remote code execution or denial of service condition by doing one of the following:
* Use overly long user name or password as input.
* Use binary characters in username or password as input.
* Use binary characters in different POP3 or IMAP4 commands.
* Send malformed, unknown commands to the server. |
Feedback