OSVDB ID: 11749

Title: Mailman Mail Command Handler Malformed E-mail DoS

Info

Disclosure

Nov 18, 2003

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Mailman contains a flaw that may allow a remote denial of service. The issue is due to an error in the mail command handler. By sending a specially crafted email command, a remote attacker can cause a denial of service, resulting in loss of availability for the mailman service.

Classification

Location: Remote/Network Access Required
Attack Type: Denial of Service, Input Manipulation
Impact: Loss of Availability
Exploit: Exploit Unknown
Disclosure: OSVDB Verified

Solution

Upgrade to version 2.0.14 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Barry Warsaw

Mailman

2.0.13

References

Credit

  • Matthew Galgoci. -


Direct URL: http://osvdb.org/36218