SmartMail Server Oversized Request Denial Of Service Vulnerability

Bugtraq ID:	6075
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Oct 31 2002 12:00AM
Updated:	Oct 31 2002 12:00AM
Credit:	Discovery of this issue is credited to securma massine <[email protected]>.
Vulnerable:	Virtualzone SmartMail Server 1.0 BETA 10
Not Vulnerable:

SmartMail Server Oversized Request Denial Of Service Vulnerability

SmartMail Server is reported to be prone to a remote denial of service
condition. It is possible to trigger this condition by sending large amounts (5MB+) of data to the server via TCP port 25 or 110.

SmartMail Server will need to be restarted to regain normal functionality.

This issue was reported in SmartMail Server 1.0 BETA 10. It is not known if other versions are affected.

SmartMail Server Oversized Request Denial Of Service Vulnerability

The following exploit was provided by securma massine <[email protected]>:

• /data/vulnerabilities/exploits/smartdos.pl

SmartMail Server Oversized Request Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

SmartMail Server Oversized Request Denial Of Service Vulnerability

References:

• SmartMail Server Homepage (Virtualzone)
  
• SmartMail server DOS (securma massine )