OSVDB ID: 15232

Title: MailEnable SMTP Malformed EHLO Request DoS

Info

Disclosure

Apr 05, 2005

Discovery

Apr 02, 2005

Dates

Exploit

Apr 05, 2005

Solution

Unknown

Description

MailEnable contains a flaw that may allow a remote denial of service. The issue is triggered when issuing a malformed request to the EHLO command containing a '(tm)' (trademark) character, which will crash the service resulting in loss of availability.

Classification

Location: Remote/Network Access Required
Attack Type: Denial of Service
Impact: Loss of Availability
Exploit: Exploit Available
Disclosure: OSVDB Verified

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, MailEnable has released a patch to address this vulnerability.

Products

MailEnable Pty. Ltd.

MailEnable Professional

1.54

MailEnable Enterprise

1.04

References

Credit

  • Corry L. - corrylBrand New Doo Doositoverde.com -


Direct URL: http://osvdb.org/36218