lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Tue Apr 5 21:30:32 2005 From: corryl at sitoverde.com (CorryL) Subject: MailEnable Smtpd remote Dos [x0n3-h4ck] -=[---------------------ADVISORY---------------------------]=- -=[ ]=- -=[ MailEnable Enterprise & Pro remote DOS ]=- -=[ ]=- -=[ Author: CorryL [corryl80@...il.com] ]=- -=[ ]=- -=[ w.x0n3-h3ck.org ]=- -=[-------------------------------------------------------------]=- -=[+] Application: Mail Enable Smtpd ( MESMTPC.exe ) -=[+] Version: (Enterprise <= 1.04)-(Professional <= 1.54) -=[+] Vendor's URL: www.mailenable.com -=[+] Platform: Windows -=[+] Bug type: DOS -=[+] Exploitation: Remote/Local -=[-] -=[+] Author: CorryL ~ corryl80[at]gmail[dot]com ~ -=[+] Reference: www.x0n3-h4ck.org ..::[ Descriprion ]::.. MailEnable's mail server software provides a powerful, scalable hosted messaging platform for Microsoft Windows. MailEnable offers stability, unsurpassed flexibility and an extensive feature set which allows you to provide cost-effective mail services. ..::[ Bug ]::.. smptd of mailenable has a bug on a particular request EHLO, the bug and' caused by the dispatch of a lace unicode, that the demon reads as an address of memory causing the crash of the service ..::[ Proof Of Concept ]::.. EHLO x99 ..::[ Exploit ]::.. http://www.x0n3-h4ck.org/upload/x0n3-h4ck_mailenable_smtpd.pl ..::[ Workaround ]::.. There is no workaround ..::[ Path or Fix ]::.. http://www.mailenable.com/hotfix ..::[ Disclousure Timeline ]::.. [02/04/2005] - Vendor notification [03/04/2005] - Vendor Response [03/04/2005] - Hotfix relased by vendor [05/04/2005] - Public disclousure CorryL corryl80@...il.com www.x0n3-h4ck.org Italian Security Team Fax (+39) 02700520894 Tel (+39) 06452215277 irc.xoned.net #x0n3-h4ck _________________________________ www.seekstat.it is your web stat
Powered by blists - more mailing lists