IA Webmail contains a flaw that allows a remote attacker to execute arbitrary code. The issue is due to a boundary error in the web service when handling HTTP GET requests. This can be exploited to cause a buffer overflow by sending an overly long, specially crafted GET request to a vulnerable system, resulting in the attacker being able to execute code remotely.

Currently, there are no known upgrades or patches to correct this issue. It is possible to correct the flaw by implementing the following workarounds:
1) Filter long requests in a HTTP proxy or firewall with URL filtering capabilities.
2) Restrict access to the web service (default port 8180/tcp) allowing only trusted IPs to connect

• Security Tracker: 1008075
• Secunia Advisory ID: 10107
• Milw0rm: 124
• Exploit Database: 124
• ISS X-Force ID: 13580
• CVE ID: 2003-1192 (see also: NVD)
• Metasploit ID: 2757
• Bugtraq ID: 8965
• Generic Exploit URL: http://immunitysec.com
  http://www.securiteam.com/exploits/6C003158UY.html
• Other Advisory URL: http://www.derkeiler.com/Mailing-Lists/VulnWatch/2003-11/0001.html
  http://www.elitehaven.net/iawebmail.txt
  http://www.securiteam.com/windowsntfocus/6B002158UQ.html
• Vendor URL: http://www.tnsoft.com

• Peter Winter-Smith - peterngssoftware.com - NGSSoftware