PT-1998-1239 · Stalker · Stalker Internet Mail Server

Published 1998-04-08 · Updated 2008-09-05 · CVE-1999-1504

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Stalker Internet Mail Server version 1.6

Description The issue allows a remote attacker to cause a denial of service, resulting in a crash, by sending a long HELO command.

Recommendations For Stalker Internet Mail Server version 1.6, consider implementing input validation to restrict the length of the HELO command to prevent the denial of service.

Exploit

Fix

Related Identifiers

CVE-1999-1504

Affected Products

Stalker Internet Mail Server

References · 4

• 🔥 https://exploit-db.com/exploits/19047 · Exploit
• http://securityfocus.com/bid/62 · Vendor Advisory
• http://securityfocus.com/archive/1/8951 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-1999-1504 · Security Note