Code-Crafters Ability Mail Server Multiple Remote Denial Of Service Vulnerabilities

Bugtraq ID:	26514
Class:	Input Validation Error
CVE:	CVE-2007-6101
Remote:	Yes
Local:	No
Published:	Nov 21 2007 12:00AM
Updated:	Dec 18 2007 08:05PM
Credit:	The vendor disclosed these issues.
Vulnerable:	Code-Crafters Ability Mail Server 2.60
Not Vulnerable:	Code-Crafters Ability Mail Server 2.61

Code-Crafters Ability Mail Server Multiple Remote Denial Of Service Vulnerabilities

Code-Crafters Ability Mail Server is prone to multiple remote denial-of-service vulnerabilities because the application fails to adequately sanitize user-supplied input.

Attackers can exploit these issues to crash the application, resulting in denial-of-service conditions.

These issues affect versions prior to Ability Mail Server 2.61.

Code-Crafters Ability Mail Server Multiple Remote Denial Of Service Vulnerabilities

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Code-Crafters Ability Mail Server Multiple Remote Denial Of Service Vulnerabilities

Solution:
The vendor released Ability Mail Server 2.61 to address these issues. Please see the references for more information.


Code-Crafters Ability Mail Server 2.60

• Code-Crafters Ability Mail Server 2.61
  http://download.code-crafters.com/ams.exe

Code-Crafters Ability Mail Server Multiple Remote Denial Of Service Vulnerabilities

References:

• Ability Mail Server Homepage (Code-Crafters)
  
• Ability Mail Server Update History (Code-Crafters)