Sec-1 has identified an exploitable Buffer Overflow within the HTTP management interface of GFI MailSecurity 8.1. By sending large strings within several areas of the HTTP request (such as a large ‘Host’ or ‘Accept’ header) critical portions of memory are overwritten. Verification of this vulnerability can be achieved through the use of a HTTP fuzzer, such as @stake webproxy. Successful exploitation could allow an attacker to gain administrative control of the targeted host.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/40682/sec-1-GFI-MailSecurity.txt
Source: https://packetstormsecurity.com/files/40682/sec-1-GFI-MailSecurity.txt.html