Bugtraq mailing list archives

RE: Nortan Antivirus 2000 Poproxy.exe problem


From: "Matthew Connor" <mconnor () gocode com>
Date: Thu, 24 May 2001 13:38:49 -0400

Poproxy.exe is the email virus scanner included in Nortan Antivirus 2000...
While messing around with this i crashed the server by sending it
too many characters (269 or more).

Example:
perl -e '{print "A"x269}' |nc 10.0.2.1 110
where 10.0.2.1 is the windows machine running poproxy.exe

Can anyone else confirm this?

Hi! I am having difficulty confirming this for two reasons. Perhaps I am
doing something wrong. I am running Norton Antivirus 2000 with poproxy.exe
on MS Outlook 2000.
poproxy.exe SEEMS to only bind to localhost (127.0.0.1) instead of my IP on
the network (192.168.0.24). If I try to telnet to port 110 from another
Windows machine, it cannot connect. If I try to telnet to 127.0.0.1 from my
own machine, it connects fine. Once I did connect to it from localhost, I
sent 269+ chars to it and only received back "-ERR". I did not experience a
crash.

Again, perhaps I'm doing something wrong.

--
Matthew Connor, Network Administrator
GoCode, Inc. - http://www.gocode.com
RFC 2267: Go and SYN no more...
Office: 843-723-5155 x205


Current thread: