NGSSoftware Insight Security Research Advisory

Name: SLWebMail Multiple Buffer Overflow Vulnerabilities
Systems Affected: SLWebMail (Installed with SLMail Pro version 2.0.9 and 
earlier) on Windows.
Severity: High Risk
Vendor URL: http://www.slmail.com/
Author: David Litchfield [ david@ngssoftware.com ]
Date Vendor Notified:    13th January 2004
Date of Public Advisory: 5th March 2004
Advisory number: #NISR05022004b
Advisory URL: http://www.ngssoftware.com/advisories/slmailwm.txt

Description
***********
SLWebMail is a web based e-mail solution designed for the small to medium 
enterprise. SLWebMail runs atop Microsoft's Internet Information Server and 
is implemented as a set of ISAPI applications. SLWebMail suffers from 
multiple buffer overflow vulnerabilities.

Details
*******
SLWebMail is installed with SLMail Pro. Implemented as a set of ISAPI 
applications, many suffer from stack based buffer overflow vulnerabilities. 
Known to be vulnerable are user.dll, loadpageadmin.dll and loadpageuser.dll. 
Even though these ISAPI applications are loaded into dllhost, which runs in 
the security context of the IWAM account and not the local system account, 
the risk should still be considered as high and customers should install the 
patch as soon as is possible.

Fix Information
***************
SLMail have made available a patch to resolve these issues: 
http://216.26.170.92/Products/SLMailPro/Utilities.asp . Customers are urged 
to update as soon as is possible.

About NGSSoftware
*****************
NGSSoftware design, research and develop intelligent, advanced application 
security assessment scanners. Based in the United Kingdom, NGSSoftware have 
offices in the South of London and the East Coast of Scotland. NGSSoftware's 
sister company NGSConsulting, offers best of breed security consulting 
services, specialising in application, host and network security 
assessments.

http://www.ngssoftware.com/

Telephone +44 208 401 0070
Fax +44 208 401 0076

enquiries@ngssoftware.com