Axigen Mail Server Multiple Denial of Service Vulnerabilities

Bugtraq ID:	22473
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2007-0886 CVE-2007-0887
Remote:	Yes
Local:	No
Published:	Feb 08 2007 12:00AM
Updated:	Mar 19 2015 09:22AM
Credit:	Neil Kettle is credited with the discovery of these vulnerabilities.
Vulnerable:	Axigen Axigen Mail Server 1.2.6 Axigen Axigen Mail Server 2.0.0b1
Not Vulnerable:	Axigen Axigen Mail Server 5.0.1

Axigen Mail Server Multiple Denial of Service Vulnerabilities

Axigen Mail Server is prone to multiple denial-of-service vulnerabilities because it fails to handle exceptional conditions.

An attacker can exploit these issues to crash the affected application, denying service to legitimate users.

Axigen Mail Server Multiple Denial of Service Vulnerabilities

Sample exploit code has been provided:

• /data/vulnerabilities/exploits/22473-1.c
• /data/vulnerabilities/exploits/22473-2.c

Axigen Mail Server Multiple Denial of Service Vulnerabilities

Solution:
The vendor has released fixes. Please contact the vendor for information on how to obtain the latest version.