OSVDB ID: 18407 Title: BusinessMail SMTP Multiple Command Remote Overflow DoS |
Info |
|
|
Dates |
||||
|
|
Description |
BusinessMail SMTP contains a flaw that may allow a remote attacker to crash the service. The issue is due to the SMTP HELO and MAIL FROM commands not properly sanitizing user input. By providing overly long strings to either command, the service will crash requiring restart. |
Classification |
Location:
Remote / Network Access
Attack Type: Denial of Service, Input Manipulation Impact: Loss of Integrity, Loss of Availability Exploit: Exploit Public Disclosure: OSVDB Verified |
Solution |
Upgrade to version 4.7 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
|