PT-2003-2211 · Eserver · Server

Published 2003-12-31 · Updated 2008-09-05 · CVE-2003-1266

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions EServer versions 2.92 through 2.97 EServer version 2.98

Description The issue affects the FTP, POP3, SMTP, and NNTP servers, allowing remote attackers to cause a denial of service by sending a large amount of data, which can cause the server to crash.

Recommendations For EServer versions 2.92 through 2.97, consider restricting access to the FTP, POP3, SMTP, and NNTP servers until a fix is available. For EServer version 2.98, if affected, restrict access to the FTP, POP3, SMTP, and NNTP servers until confirmation of the issue and a fix are available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2003-1266

Affected Products

Server

References · 12

• 🔥 http://securityfocus.com/bid/6521 · Exploit
• 🔥 http://securityfocus.com/bid/6520 · Exploit
• 🔥 https://exploit-db.com/exploits/22122 · Exploit
• 🔥 https://exploit-db.com/exploits/22124 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2003-01/0022.html · Exploit
• 🔥 http://securityfocus.com/bid/6522 · Exploit
• 🔥 https://exploit-db.com/exploits/22123 · Exploit
• 🔥 http://securityfocus.com/bid/6519 · Exploit
• 🔥 https://exploit-db.com/exploits/22121 · Exploit
• http://iss.net/security_center/static/10975.php · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2003-1266 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1266 · Note