Acritum Femitter Server 'RETR' Command Remote Denial of Service Vulnerability

Bugtraq ID:	28973
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2008-2032
Remote:	Yes
Local:	No
Published:	Apr 28 2008 12:00AM
Updated:	May 07 2015 05:29PM
Credit:	Neelima Premsankar
Vulnerable:	Acritum Femitter Server 1.03
Not Vulnerable:

Acritum Femitter Server 'RETR' Command Remote Denial of Service Vulnerability

Acritum Femitter Server is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions.

Successfully exploiting this issue would cause the affected application to crash, denying service to legitimate users.

Femitter Server 1.03 is vulnerable; other versions may also be affected.

Acritum Femitter Server 'RETR' Command Remote Denial of Service Vulnerability

Attackers can exploit this issue by using readily available network utilities.

The following exploits are available:

• /data/vulnerabilities/exploits/28973.c
• /data/vulnerabilities/exploits/28973-Salwan.c

Acritum Femitter Server 'RETR' Command Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Acritum Femitter Server 'RETR' Command Remote Denial of Service Vulnerability

References:

• Acritum Femitter Server Product Page (Acritum)