PSCS VPOP3 Email Server Script Insertion Vulnerability

Nenad Vijatov — Mon, 02 Feb 2009 17:00:17 +0000

I found vulnerability in VPOP3 Email server which allows script insertion.
Vulnerability is discovered in the version 2.6.0h. Although the vendor release the patch (implemented some filters), vulnerability still exists in the new version 2.6.0i. Patch don’t completely fix the vulnerability.

Secunia confirmed vulnerability.

reg delete /f

Nenad Vijatov — Tue, 08 Jan 2008 08:46:30 +0000

Today, I have one problem … very strange problem and I didn’t find solution on Internet.

Have you ever try to use reg delete KeyName /v and to add /f switch?

I think it’s not possible in Windows XP?!

My solution is …
Use VB script to do that:

‘– script begin –
Const HKEY_LOCAL_MACHINE = &H80000002

strComputer = “.”

Set oReg=GetObject(“winmgmts:{impersonationLevel=impersonate}!” & _
strComputer & “rootdefault:StdRegProv”)

strKeyPath = “your_path – ex. SYSTEMControlSet001 …”
strDWORDValueName = “Value that you want to delete”

oReg.DeleteValue HKEY_LOCAL_MACHINE,strKeyPath,strDWORDValueName

MsgBox “The End”

‘– script end –

Nenad Vijatov » Windows Security

PSCS VPOP3 Email Server Script Insertion Vulnerability

reg delete /f