|
|
|
|
|
|
|
|
|
Secunia Advisory SA8854Magic Winmail Server Denial of Service
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||
Description
Magic Winmail Server does not perform adequate validation of user input supplied to the commands "USER" and "PASS". This can be exploited to cause a Denial of Service on a vulnerable mail server by supplying a format specifier "%n" as an argument to the command. Solution Provided and/or discovered by Deep Links Do you have additional information related to this advisory?Please provide information about patches, mitigating factors, new versions, exploits, faulty patches, links, and other relevant data by posting comments to this Advisory. You can also send this information to vuln@secunia.com
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||
