Test ID:	1.3.6.1.4.1.25623.1.0.11570
Category:	Denial of Service
Title:	MDaemon DELE DoS
Summary:	NOSUMMARY
Description:	Description: It is possible to crash the remote MDaemon server by suppling oversized arguments to the commands DELE and UIDL. An attacker may use this flaw to prevent other users from fetching their e-mail. It will also crash other MDaemon services (SMTP, IMAP), thus preventing this server from receiving any email as well. To exploit this flaw, a valid POP account is needed. *** Nessus solely relied on the version number of the remote server *** to issue this warning. Solution : upgrade to MDaemon 6.5.0 Risk factor : High
Cross-Ref:	BugTraq ID: 6053 Common Vulnerability Exposure (CVE) ID: CVE-2002-1539 http://www.securityfocus.com/bid/6053 Bugtraq: 20021027 MDaemon SMTP/POP/IMAP server DoS (Google Search) http://archives.neohapsis.com/archives/bugtraq/2002-10/0382.html http://www.iss.net/security_center/static/10488.php
Copyright	This script is Copyright (C) 2003 Renaud Deraison

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.