Alt-N MDaemon IMAP DoS漏洞-安全小百科

Alt-N MDaemon IMAP DoS漏洞

漏洞ID	1106263	漏洞类型	输入验证
发布时间	2001-03-23	更新时间	2005-10-20
CVE编号	CVE-2001-0584	CNNVD-ID	CNNVD-200108-108
漏洞平台	Windows	CVSS评分	2.1

|漏洞来源

https://www.exploit-db.com/exploits/20696
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200108-108

|漏洞详情

Alt-NTechnologiesMDaemon3.5.6版本的IMAP服务器存在漏洞。本地用户可以借助超长（1）SELECT或（2）EXAMINE命令导致服务拒绝（挂起）。

|漏洞EXP

source: http://www.securityfocus.com/bid/2508/info

A successfully logged-in user, via IMAP, could cause MDaemon to terminate the connection. If the user submits either a 'SELECT' or 'EXAMINE' command appended with 250 or more characters, MDaemon will refuse any new connections to the IMAP service. A restart of the service is required in order to gain normal functionality. 

* OK company.mail IMAP4rev1 MDaemon 3.5.6 ready

1 LOGIN JOE PASSWORD
* OK LOGIN completed
1 SELECT AAAAAAA....

|参考资料

来源:BUGTRAQ
名称:20010325MDaemonIMAPDenialOfService
链接:http://archives.neohapsis.com/archives/bugtraq/2001-03/0365.html
来源:XF
名称:mdaemon-imap-command-dos(6279)
链接:http://xforce.iss.net/static/6279.php
来源:BID
名称:2508
链接:http://www.securityfocus.com/bid/2508

相关推荐: HP OpenVMS VAX未明安全漏洞

HP OpenVMS VAX未明安全漏洞漏洞ID 1199420 漏洞类型未知发布时间 2005-05-02 更新时间 2005-05-02 CVE编号 CVE-2005-0652 CNNVD-ID CNNVD-200505-595 漏洞平台 N/A C…

文章版权归作者所有，未经允许请勿转载。

THE END