Email Sanitizer MIME Type Parsing Remote Denial Of Service Vulnerability
BID:12051
Info
Email Sanitizer MIME Type Parsing Remote Denial Of Service Vulnerability
| Bugtraq ID: | 12051 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 20 2004 12:00AM |
| Updated: | Dec 20 2004 12:00AM |
| Credit: | The individual or individuals responsible for the discovery of this issue are currently unknown; the vendor disclosed this issue. |
| Vulnerable: |
Email Sanitizer Email Sanitizer 1.147 Email Sanitizer Email Sanitizer 1.146 Email Sanitizer Email Sanitizer 1.145 Email Sanitizer Email Sanitizer 1.144 Email Sanitizer Email Sanitizer 1.143 Email Sanitizer Email Sanitizer 1.142 Email Sanitizer Email Sanitizer 1.141 Email Sanitizer Email Sanitizer 1.140 |
| Not Vulnerable: |
Email Sanitizer Email Sanitizer 1.148 |
Discussion
Email Sanitizer MIME Type Parsing Remote Denial Of Service Vulnerability
A remote denial of service vulnerability affects the MIME type parsing functionality of Email Sanitizer. This issue is due to a failure of the application to properly handle malformed MIME type specifiers.
An attacker may leverage this issue to cause the affected sanitizer to hang and stop responding, effectively denying service to legitimate users.
A remote denial of service vulnerability affects the MIME type parsing functionality of Email Sanitizer. This issue is due to a failure of the application to properly handle malformed MIME type specifiers.
An attacker may leverage this issue to cause the affected sanitizer to hang and stop responding, effectively denying service to legitimate users.
Exploit / POC
Email Sanitizer MIME Type Parsing Remote Denial Of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Email Sanitizer MIME Type Parsing Remote Denial Of Service Vulnerability
Solution:
The vendor has released Email Sanitizer version 1.148 dealing with this issue.
Email Sanitizer Email Sanitizer 1.140
Email Sanitizer Email Sanitizer 1.141
Email Sanitizer Email Sanitizer 1.142
Email Sanitizer Email Sanitizer 1.143
Email Sanitizer Email Sanitizer 1.144
Email Sanitizer Email Sanitizer 1.145
Email Sanitizer Email Sanitizer 1.146
Email Sanitizer Email Sanitizer 1.147
Solution:
The vendor has released Email Sanitizer version 1.148 dealing with this issue.
Email Sanitizer Email Sanitizer 1.140
-
Email Sanitizer Email Sanitizer 1.148
http://www.impsec.org/email-tools/html-trap.procmail.gz
Email Sanitizer Email Sanitizer 1.141
-
Email Sanitizer Email Sanitizer 1.148
http://www.impsec.org/email-tools/html-trap.procmail.gz
Email Sanitizer Email Sanitizer 1.142
-
Email Sanitizer Email Sanitizer 1.148
http://www.impsec.org/email-tools/html-trap.procmail.gz
Email Sanitizer Email Sanitizer 1.143
-
Email Sanitizer Email Sanitizer 1.148
http://www.impsec.org/email-tools/html-trap.procmail.gz
Email Sanitizer Email Sanitizer 1.144
-
Email Sanitizer Email Sanitizer 1.148
http://www.impsec.org/email-tools/html-trap.procmail.gz
Email Sanitizer Email Sanitizer 1.145
-
Email Sanitizer Email Sanitizer 1.148
http://www.impsec.org/email-tools/html-trap.procmail.gz
Email Sanitizer Email Sanitizer 1.146
-
Email Sanitizer Email Sanitizer 1.148
http://www.impsec.org/email-tools/html-trap.procmail.gz
Email Sanitizer Email Sanitizer 1.147
-
Email Sanitizer Email Sanitizer 1.148
http://www.impsec.org/email-tools/html-trap.procmail.gz
References
Email Sanitizer MIME Type Parsing Remote Denial Of Service Vulnerability
References:
References:
- Email Sanitizer History of changes (Email Sanitizer)
- Email Sanitizer News & Notes (Email Sanitizer)