BID:13888

GoodTech SMTP Malformed RCTP TO Request Denial Of Service Vulnerability

Info

GoodTech SMTP Malformed RCTP TO Request Denial Of Service Vulnerability

Bugtraq ID:	13888
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2005-1013
Remote:	Yes
Local:	No
Published:	Apr 04 2005 12:00AM
Updated:	Jul 12 2009 02:56PM
Credit:	This issue was discovered by Reed Arvin <[email protected]>.
Vulnerable:	MailEnable MailEnable Professional 1.54 MailEnable MailEnable Professional 1.53 MailEnable MailEnable Professional 1.52 MailEnable MailEnable Professional 1.51 MailEnable MailEnable Professional 1.5 MailEnable MailEnable Enterprise Edition 1.0 4 MailEnable MailEnable Enterprise Edition 1.0 3 MailEnable MailEnable Enterprise Edition 1.0 2 MailEnable MailEnable Enterprise Edition 1.0 1 MailEnable MailEnable Enterprise Edition 1.0 GoodTech SMTP Server 5.14

Not Vulnerable:	GoodTech SMTP Server 5.15

Discussion

GoodTech SMTP Malformed RCTP TO Request Denial Of Service Vulnerability

GoodTech Systems is prone to a vulnerability that may allow remote attackers to crash the SMTP service. The issue arises when the server handles an specially crafted 'RCTP TO' request.

This vulnerability is reported to affect GoodTech Systems SMTP server for Windows NT/2000/XP version 5.14.

Exploit / POC

GoodTech SMTP Malformed RCTP TO Request Denial Of Service Vulnerability

An exploit is not required.

The exploit (GoodTechSMTPServer_DOS.pl) is from Reed Arvin <[email protected]>.

The exploit (goodtech_dos.pl) is from n3w7yp3 <[email protected]>.

/data/vulnerabilities/exploits/mailenable_smtpd.pl
/data/vulnerabilities/exploits/GoodTechSMTPServer_DOS.pl
/data/vulnerabilities/exploits/goodtech_dos.pl

Solution / Fix

GoodTech SMTP Malformed RCTP TO Request Denial Of Service Vulnerability

Solution:
It is reported that the vendor has addressed this issue in version '5.14' of the software. Customers are advised to contact the vendor to obtain the upgrade.

MailEnable MailEnable Enterprise Edition 1.0 2