CVE-2007-4440 — AI Deep Analysis Summary

🚨 **Essence**: A stack overflow in Mercury Mail's SMTP module (`mercurys.dll`). 💥 **Consequences**: Triggered by long `AUTH CRAM-MD5` strings.…

🛡️ **Root Cause**: Improper handling of **buffer boundaries**. 📉 **Flaw**: The system fails to validate the length of the `AUTH CRAM-MD5` string, allowing it to overflow the stack.

📦 **Affected**: **Mercury Mail Transport System**. 📂 **Component**: Specifically the **Mercury/32 SMTP server module** (`mercurys.dll`).

🕵️ **Hackers' Power**: Remote code execution. 🔓 **Privileges**: Can achieve **full control** over the server system. No local access needed.

⚡ **Threshold**: **Low**. 🔑 **Auth**: Requires a malicious authentication request. If the SMTP service is exposed, remote exploitation is feasible.

💣 **Public Exp?**: **YES**. 📂 **Sources**: Exploit-DB #4294, VUPEN ADV-2007-2918, Secunia 26519. Wild exploitation is possible.

🔍 **Self-Check**: Scan for **Mercury Mail** services. 📡 **Indicator**: Look for `mercurys.dll` or SMTP responses accepting `AUTH CRAM-MD5` with oversized payloads.

🩹 **Official Fix**: **YES**. 📝 **Patch**: Update to **version 4.51** or later (Ref: pmail.com).

🚧 **No Patch?**: Disable the **SMTP service** if not needed. 🛑 **Mitigation**: Implement strict input filtering on the SMTP gateway to block oversized `AUTH` commands.

🔥 **Urgency**: **CRITICAL**. ⚠️ **Priority**: Patch immediately. Remote code execution + public exploits = High risk of compromise.