Qualcomm Eudora Internet Mail Server Multiple Denial of Service Vulnerabilities

Bugtraq ID:	16179
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	Yes
Published:	Jan 09 2006 12:00AM
Updated:	Jan 09 2006 12:00AM
Credit:	Reported by the vendor.
Vulnerable:	PHPMailer PHPMailer 3.2.8 PHPMailer PHPMailer 3.2.7 PHPMailer PHPMailer 3.2.6 PHPMailer PHPMailer 3.2.5 PHPMailer PHPMailer 3.2.4 Newmad Technologies PicoWebServer 3.2.8 Newmad Technologies PicoWebServer 3.2.6 Newmad Technologies PicoWebServer 3.2.5 Newmad Technologies PicoWebServer 3.2.4
Not Vulnerable:

Qualcomm Eudora Internet Mail Server Multiple Denial of Service Vulnerabilities

Qualcomm Eudora Internet Mail Server is prone to multiple denial of service vulnerabilities.

Malformed NTLM authentication requests, corrupted incoming Mail X or a malformed temporary mail file may trigger crashes.

It is conjectured that the first issue is remote in nature, however, the other two issues may present a local threat. This is not confirmed.

EIMS 3.2.8 and prior versions are affected.

Qualcomm Eudora Internet Mail Server Multiple Denial of Service Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Qualcomm Eudora Internet Mail Server Multiple Denial of Service Vulnerabilities

Solution:
The vendor has released patches to address these issues. These patches are available from the following location:

http://www.eudora.co.nz/updates.html

Qualcomm Eudora Internet Mail Server Multiple Denial of Service Vulnerabilities

References:

• EIMS Updates (Qualcomm)
  
• Eudora Internet Mail Server 3.2 (Qualcomm)