Denial of Service : MailEnable HTTPMail < 1.2 Content-Length Overflow Vulnerability

Anfälligkeitssuche		Suche in 324607 CVE Beschreibungen und 145615 Test Beschreibungen, Zugriff auf 10,000+ Quellverweise.
	Tests CVE Alle

Test Kennung: 1.3.6.1.4.1.25623.1.0.14655

Kategorie: Denial of Service

Titel: MailEnable HTTPMail < 1.2 Content-Length Overflow Vulnerability - Active Check

Zusammenfassung: MailEnable is prone to a Content-Length overflow vulnerability.

Beschreibung: Summary:
MailEnable is prone to a Content-Length overflow vulnerability.

Vulnerability Insight:
The flaw can be exploited by issuing an HTTP GET with a
Content-Length header exceeding 100 bytes, which causes a fixed-length buffer to overflow,
crashing the HTTPMail service and possibly allowing for arbitrary code execution.

Solution:
Update to version 1.2 or later or apply the HTTPMail hotfix
from 9th August 2004.

CVSS Score:
10.0

CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C

Copyright Copyright (C) 2004 George A. Theall

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.
Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.

Test Kennung:	1.3.6.1.4.1.25623.1.0.14655
Kategorie:	Denial of Service
Titel:	MailEnable HTTPMail < 1.2 Content-Length Overflow Vulnerability - Active Check
Zusammenfassung:	MailEnable is prone to a Content-Length overflow vulnerability.
Beschreibung:	Summary: MailEnable is prone to a Content-Length overflow vulnerability. Vulnerability Insight: The flaw can be exploited by issuing an HTTP GET with a Content-Length header exceeding 100 bytes, which causes a fixed-length buffer to overflow, crashing the HTTPMail service and possibly allowing for arbitrary code execution. Solution: Update to version 1.2 or later or apply the HTTPMail hotfix from 9th August 2004. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Copyright	Copyright (C) 2004 George A. Theall