NoticeWare Email Server NG 'PASS' Command Remote Denial of Service Vulnerability

Bugtraq ID:	31697
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2008-6185
Remote:	Yes
Local:	No
Published:	Oct 10 2008 12:00AM
Updated:	May 07 2015 05:22PM
Credit:	Paul Hand
Vulnerable:	NoticeWare Corporation Noticeware Email Server NG 5.1.2 2
Not Vulnerable:

NoticeWare Email Server NG 'PASS' Command Remote Denial of Service Vulnerability

NoticeWare Email Server NG is prone to a remote denial-of-service vulnerability.

Exploiting this issue allows remote attackers to crash the application, denying service to legitimate users.

This issue affects NoticeWare Email Server NG 5.1.2.2; other versions may also be vulnerable.

NoticeWare Email Server NG 'PASS' Command Remote Denial of Service Vulnerability

An attacker can exploit this issue using readily available tools.

The following exploit is available:

• /data/vulnerabilities/exploits/31697.py

NoticeWare Email Server NG 'PASS' Command Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

NoticeWare Email Server NG 'PASS' Command Remote Denial of Service Vulnerability

References:

• NoticeWare Email Server Homepage (NoticeWare Corporation)