× Few antiviral products inadequately detect 3proxy as Trojan.Daemonize, Backdoor.Daemonize, etc and many detect 3proxy as a PUA (potentially unwanted program). It may cause browser warning on download page. 3proxy is not trojan or backdoor and contains no functionality except described in documentation. Clear explanation of this fact is given, for example, in Microsoft's article.
Title                   : FTGate PRO/Office hotfixes
Author                  : 3APA3A <[email protected]>
Date                    : December, 18 2001
Affected                : FTGate PRO 1.05, FTGate Office 1.05
Vendor                  : Floositek [1]
Risk                    : high
Remote                  : yes
Exploitable             : yes


Ftgate  is Internet mail server for Windows with SMTP/POP3 support and a
lot   of   additional  features  by  Floositek[1].  During  testing  few
vulnerabilities   were   found  by  Ilya  Teterin  aka  buggzy  [4]  and


1. Heap overflow in APOP command

FTGate  detects  buffer  overflow  attack  attempts.  If attack detected
source  IP  is  banned. But in case of APOP command it still possible to
overflow dynamic buffer with


it  causes  program  to crash immediately or after buffer is free()'d if
buffer  size  is  in  range of approximately 1-2k. FTGateSrv.exe crashes
with message like

      FTGateSrv.exe - Application error

      The instruction at 0x002b686b referenced memory at 0x41414145. The
      memory couldn't be "read".

      002B6865   mov         edx,dword ptr [ebp-20h]
      002B6868   mov         eax,dword ptr [edx+4]
      002B686B   call        dword ptr [eax+4]

(as you can see in example this problem can be exploited to execute code
of attacker's choice, but there are few different crash situations. It's
not clear if this problem can always be exploited remotely.)

2. DoS via Rcpt to: flood

By  specifying  huge number of Rcpt to: in SMTP session it's possible to
cause  memory leak. During and after attack server will use 100% CPU.

3. DoS against POP3 mailbox.

As  reported  by  buggzy [4] mailbox can be locked before authentication
via POP3 USER command.


Vendor  released  patches for FTGate PRO and FTGate Office [2] within 24
hours after problem was committed.


1. Floositek Ltd
2. Hotfixes for FTGatePro V1.05
3. Multiple bugs in FTGate
4. Головоломка для хакера, взлом FTGate