PT-2003-2211 · Eserver · Server

Publicado 2003-12-31 · Atualizado 2008-09-05 · CVE-2003-1266

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions EServer versions 2.92 through 2.97 EServer version 2.98

Description The issue affects the FTP, POP3, SMTP, and NNTP servers, allowing remote attackers to cause a denial of service by sending a large amount of data, which can cause the server to crash.

Recommendations For EServer versions 2.92 through 2.97, consider restricting access to the FTP, POP3, SMTP, and NNTP servers until a fix is available. For EServer version 2.98, if affected, restrict access to the FTP, POP3, SMTP, and NNTP servers until confirmation of the issue and a fix are available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Identificadores relacionados

CVE-2003-1266

Produtos afetados

Server

Referências · 12

• 🔥 http://securityfocus.com/bid/6521 · Exploit
• 🔥 http://securityfocus.com/bid/6520 · Exploit
• 🔥 https://exploit-db.com/exploits/22122 · Exploit
• 🔥 https://exploit-db.com/exploits/22124 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2003-01/0022.html · Exploit
• 🔥 http://securityfocus.com/bid/6522 · Exploit
• 🔥 https://exploit-db.com/exploits/22123 · Exploit
• 🔥 http://securityfocus.com/bid/6519 · Exploit
• 🔥 https://exploit-db.com/exploits/22121 · Exploit
• http://iss.net/security_center/static/10975.php · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2003-1266 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1266 · Nota