Code-Crafters Ability Mail Server IMAP FETCH Request Remote Denial Of Service Vulnerability

Bugtraq ID:	36519
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2009-3445
Remote:	Yes
Local:	No
Published:	Sep 25 2009 12:00AM
Updated:	Apr 13 2015 09:06PM
Credit:	The vendor.
Vulnerable:	Code-Crafters Ability Mail Server 2.63
Not Vulnerable:	Code-Crafters Ability Mail Server 2.70

Code-Crafters Ability Mail Server IMAP FETCH Request Remote Denial Of Service Vulnerability

Ability Mail Server is prone to a denial-of-service vulnerability because it fails to adequately handle IMAP requests.

Attackers can exploit this issue to cause the affected application to crash, denying service to legitimate users.

Versions prior to Ability Mail Server 2.70 are affected.

Code-Crafters Ability Mail Server IMAP FETCH Request Remote Denial Of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Code-Crafters Ability Mail Server IMAP FETCH Request Remote Denial Of Service Vulnerability

Solution:
Updates are available. Please see the references for details.

Code-Crafters Ability Mail Server IMAP FETCH Request Remote Denial Of Service Vulnerability

References:

• Ability Mail Server Homepage (Code-Crafters)
  
• Version 2.70 (Code-Crafters)