Secunia

A Denial of Service vulnerability has been identified in NGC Active MailServer 2002.

The problem is that the SMTP service doesn't handle long arguments to the "HELO", "MAIL FROM" and "RCPT TO" parameters correctly. 33000 character long strings causes the mail server to crash.

Solution
Implement a firewall or proxy which can filter malicious SMTP requests. Or use a different mail server.

Provided and/or discovered by
Ziv Kamir

Deep Links
Links available in Customer Area