PT-2005-3027 · Inframail · Inframail Advantage Server Edition

Reed Arvin · Published 2005-06-30 · Updated 2016-10-18 · CVE-2005-2085

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Inframail Advantage Server Edition versions 6.0 through 6.7

Description: The issue allows remote attackers to cause a denial of service, resulting in a process crash. This can be achieved via a long SMTP FROM field or possibly an FTP NLST command.

Recommendations: For versions 6.0 through 6.7, consider restricting access to the SMTP and FTP services until a fix is available. As a temporary workaround, limit the length of the SMTP FROM field to prevent buffer overflow. Additionally, restrict the use of the FTP NLST command to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2005-2085

Affected Products

Inframail Advantage Server Edition

References · 4

• 🔥 https://exploit-db.com/exploits/1166 · Exploit
• 🔥 https://exploit-db.com/exploits/1165 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-2085 · Security Note
• http://marc.info/?l=bugtraq&m=111998161006731&w=2 · Note