PT-2008-3385 · Smartertools · Smartermail

Published 2008-04-16 · Updated 2017-08-08 · CVE-2008-1854

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions SmarterMail version 5.0.2999

Description The issue allows remote attackers to cause a denial of service, resulting in service termination. This can be achieved by sending a long HTTP request, including "GET", "HEAD", "PUT", "POST", or "TRACE" requests.

Recommendations For SmarterMail version 5.0.2999, consider restricting access to the SmarterMail Web Server to minimize the risk of exploitation until a fix is available. As a temporary workaround, limiting the length of incoming HTTP requests may help prevent service termination. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2008-1854

Affected Products

Smartermail

References · 6

• 🔥 http://securityfocus.com/bid/28610 · Exploit
• 🔥 https://exploit-db.com/exploits/31607 · Exploit
• http://secunia.com/advisories/29732 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1854 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41710 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1854 · Note