Denial of Service : MailEnable HTTPMail < 1.2 Content-Length Overflow Vulnerability

Búsqueda de Vulnerabilidad		Buscar 324607 Descripciones CVE y 145615 Descripciones de Pruebas, accesos 10,000+ referencias cruzadas.
	Pruebas CVE Todos

ID de Prueba: 1.3.6.1.4.1.25623.1.0.14655

Categoría: Denial of Service

Título: MailEnable HTTPMail < 1.2 Content-Length Overflow Vulnerability - Active Check

Resumen: MailEnable is prone to a Content-Length overflow vulnerability.

Descripción: Summary:
MailEnable is prone to a Content-Length overflow vulnerability.

Vulnerability Insight:
The flaw can be exploited by issuing an HTTP GET with a
Content-Length header exceeding 100 bytes, which causes a fixed-length buffer to overflow,
crashing the HTTPMail service and possibly allowing for arbitrary code execution.

Solution:
Update to version 1.2 or later or apply the HTTPMail hotfix
from 9th August 2004.

CVSS Score:
10.0

CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C

Copyright Copyright (C) 2004 George A. Theall

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.
Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.

ID de Prueba:	1.3.6.1.4.1.25623.1.0.14655
Categoría:	Denial of Service
Título:	MailEnable HTTPMail < 1.2 Content-Length Overflow Vulnerability - Active Check
Resumen:	MailEnable is prone to a Content-Length overflow vulnerability.
Descripción:	Summary: MailEnable is prone to a Content-Length overflow vulnerability. Vulnerability Insight: The flaw can be exploited by issuing an HTTP GET with a Content-Length header exceeding 100 bytes, which causes a fixed-length buffer to overflow, crashing the HTTPMail service and possibly allowing for arbitrary code execution. Solution: Update to version 1.2 or later or apply the HTTPMail hotfix from 9th August 2004. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Copyright	Copyright (C) 2004 George A. Theall