PT-2002-2666 · Smartmail · Smartmail Server

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1945

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions SmartMail Server version 1.0 Beta 10

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending a long request to either the SMTP or POP3 service. Specifically, this can be achieved through "TCP port 25 (SMTP)" or "TCP port 110 (POP3)".

Recommendations For SmartMail Server version 1.0 Beta 10, consider restricting access to TCP ports 25 and 110 until a patch is available to prevent potential denial of service attacks.

Exploit

Correção

Identificadores relacionados

CVE-2002-1945

Produtos afetados

Smartmail Server

Referências · 5

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-10/0418.html · Exploit
• 🔥 http://securityfocus.com/bid/6075 · Exploit
• 🔥 https://exploit-db.com/exploits/21973 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1945 · Nota de Segurança
• http://iss.net/security_center/static/10512.php · Nota