Title: Artisoft XtraMail Multiple DoS Vulnerabilities
Severity: MODERATE
Description:
There are several unchecked buffers in XtraMail 1.11, which when overflowed will crash the server and cause a denial of service.
1: POP3 server PASS argument
Will be overflowed with a password of over 1500 characters.
2: SMTP server HELO argument
Will be overflowed with a 10,000 character argument to the HELO command.
3: Control service Username
XtraMail includes a remote administration utility which listens on port 32000 for logins. The username buffer will be overflowed with a string of 10,000 characters or more.
Affected Products:
- Artisoft XtraMail 1.11.0
References:
- Artisoft: XtraMail Homepage
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
