Rule:--Sid:3074--Summary:This event is generated when an attempt is made to exploit a bufferoverflow associated with the several commands of an IMAP service. Thisevent is concerned with data supplied as a parameter to the"subscribe" command.--Impact:A successful attack may cause a denial of service or a buffer overflowand the subsequent execution of arbitrary code on a vulnerable server.--Detailed Information:This event is generated when excess data is detected in an IMAP command.Some IMAP implementations exhibit programming errors that can lead to abuffer overflow condition when excess data is supplied to a staticbuffer.A vulnerability exists in the way that the Mercury Mail IMAP servicehandles several commands.  An excessively long command argument cantrigger a denial of service or a buffer overflow and the subsequentexecution of arbitrary code on a vulnerable server.--Affected Systems:	Pegasus Mail Mercury Mail Transport System 3.32	Pegasus Mail Mercury Mail Transport System 4.01a--Attack Scenarios:An attacker can supplied an overly long command, causing denial ofservice or a buffer overflow.--Ease of Attack:Simple.--False Positives:None known.--False Negatives:None known.--Corrective Action:Upgrade to the latest non-affected version of the software.--Contributors:Sourcefire Vulnerability Research TeamBrian Caswell<bmc@sourcefire.com>Judy Novak <judy.novak@sourcefire.com>Nigel Houghton <nigel.houghton@sourcefire.com>--Additional References:--