Dr_insane has reported a vulnerability in BaSoMail Server, allowing malicious people to cause a Denial of Service.

The problem is that BaSoMail Server fails to handle multiple open connections on ports 25/tcp and 110/tcp. This can be exploited to cause the service to consume 100% CPU resources by opening about 500 connections.

The vulnerability has been reported in version 1.24. Other versions may also be affected.

Solution
No update is available.
Further details available in Customer Area

Provided and/or discovered by
Dr_insane

Original Advisory
http://members.lycos.co.uk/r34ct/main/Baso_mail/Baso_1.24.txt

Deep Links
Links available in Customer Area