PT-2008-3385 · Smartertools · Smartermail

Publicado 2008-04-16 · Atualizado 2017-08-08 · CVE-2008-1854

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions SmarterMail version 5.0.2999

Description The issue allows remote attackers to cause a denial of service, resulting in service termination. This can be achieved by sending a long HTTP request, including "GET", "HEAD", "PUT", "POST", or "TRACE" requests.

Recommendations For SmarterMail version 5.0.2999, consider restricting access to the SmarterMail Web Server to minimize the risk of exploitation until a fix is available. As a temporary workaround, limiting the length of incoming HTTP requests may help prevent service termination. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Identificadores relacionados

CVE-2008-1854

Produtos afetados

Smartermail

Referências · 6

• 🔥 http://securityfocus.com/bid/28610 · Exploit
• 🔥 https://exploit-db.com/exploits/31607 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41710 · Nota
• http://secunia.com/advisories/29732 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1854 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1854 · Nota de Segurança