OSVDB ID: 9789

Title: MailEnable SMTP DNS Lookup DoS

Info

Disclosure

Sep 09, 2004

Discovery

Unknown

Dates

Exploit

Sep 09, 2004

Solution

Unknown

Description

MailEnable contains a flaw that may allow a remote denial of service. The issue is triggered when a domain server returns more than 100 DNS MX records, and will result in loss of availability for the SMTP.

Classification

Location: Remote/Network Access Required
Attack Type: Denial of Service
Impact: Loss of Availability
Exploit: Exploit Available
Disclosure: OSVDB Verified

Solution

Upgrade Standard to 1.8, Professional to 1.2, or higher, as it has been reported to fix this vulnerability. Additionally , MailEnable has released a patch to address this vulnerability.

Products

MailEnable Pty. Ltd.

MailEnable Standard Edition

1.71

MailEnable Professional Edition

1.18

References

Credit

Unknown or Incomplete



Direct URL: http://osvdb.org/36218