Quick 'n Easy Mail Server SMTP Request Remote Denial Of Service Vulnerability

Bugtraq ID:	34814
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	May 04 2009 12:00AM
Updated:	May 05 2009 07:16PM
Credit:	shinnai
Vulnerable:	Pablo Software Solutions Quick 'n Easy Mail Server 3.3
Not Vulnerable:

Quick 'n Easy Mail Server SMTP Request Remote Denial Of Service Vulnerability

Quick 'n Easy Mail Server is prone to a denial-of-service vulnerability because it fails to adequately handle multiple socket requests.

Attackers can exploit this issue to cause the affected application to reject SMTP requests, denying service to legitimate users.

The demonstration release of Quick 'n Easy Mail Server 3.3 is vulnerable; other versions may also be affected.

Quick 'n Easy Mail Server SMTP Request Remote Denial Of Service Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/34814.py

Quick 'n Easy Mail Server SMTP Request Remote Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Quick 'n Easy Mail Server SMTP Request Remote Denial Of Service Vulnerability

References:

• Quick 'n Easy Mail Server Homepage (Pablo Software Solutions)