Code-Crafters Ability Mail Server Multiple Vulnerabilities

Bugtraq ID:	10695
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jul 12 2004 12:00AM
Updated:	Jul 12 2004 12:00AM
Credit:	Discovery is credited to Dr_insane <[email protected]>.
Vulnerable:	Code-Crafters Ability Mail Server 1.18
Not Vulnerable:

Code-Crafters Ability Mail Server Multiple Vulnerabilities

Ability Mail Server is reported prone to multiple vulnerabilities that may allow a remote attacker to carry out cross-site scripting and denial of service attacks.

The server is prone to a cross-site scripting vulnerability that may allow an attacker to execute arbitrary HTML and script code in the browser of a vulnerable user.

It is reported that the mail server is also prone to a denial of service vulnerability. This issue presents itself when an attacker establishes about 150-200 connections to various services such as SMTP, POP3, View FeaturesIMAP4, WebMail etc.

These issue are reported to affect Ability Mail Server version 1.18, however, other versions may be affected as well.

Code-Crafters Ability Mail Server Multiple Vulnerabilities

No exploit is required.

The following proof of concept is available:
http://www.example.com/_error?id=[id]&errormsg=[exploit_code]
http://www.example.com/_error?id=[id]&errormsg=<script>alert(document.cookie)</script>

Code-Crafters Ability Mail Server Multiple Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Code-Crafters Ability Mail Server Multiple Vulnerabilities

References:

• Ability Mail server 1.18 Dos attack and Css Vulnerabilities (Dr_insane)
  
• Ability Mail Server Homepage (Code-Crafters)