SmartMail Server Closed Connection Denial Of Service Vulnerability

Bugtraq ID:	6074
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Oct 31 2002 12:00AM
Updated:	Oct 31 2002 12:00AM
Credit:	Discovery of this issue is credited to securma massine <[email protected]>.
Vulnerable:	Virtualzone SmartMail Server 2.0
Not Vulnerable:

SmartMail Server Closed Connection Denial Of Service Vulnerability

SmartMail Server is reported to be prone to a denial of service when a client is sending data and then closes the connection unexpectedly.

SmartMail Server will need to be restarted to regain normal functionality.

This issue was reported in SmartMail Server 2.0 Interim Build 83. It is not known if other versions are affected.

SmartMail Server Closed Connection Denial Of Service Vulnerability

The following exploit was provided by securma massine <[email protected]>:

• /data/vulnerabilities/exploits/smartmail_2_dos.pl

SmartMail Server Closed Connection Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

SmartMail Server Closed Connection Denial Of Service Vulnerability

References:

• SmartMail Server Homepage (Virtualzone)
  
• SmartMail server DOS (securma massine )