Nessus Plugin #14712

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

MailEnable SMTP Connector Service DNS Lookup DoS Vulnerability

Family:

Denial of Service

Category:

infos

Copyright:

This script is Copyright (C) 2004 George A. Theall

Summary:

Checks for DNS Lookup DoS Vulnerability in MailEnable SMTP Connector Service

Version:

$Revision: 1.3 $

Cve_id:

-

Bugtraq_id:

11144

Xrefs:

OSVDB:9789, OSVDB:10727

Description:

The target is running at least one instance of MailEnable's SMTP
Connector service. A flaw exists in both the Standard Edition 1.7x
and Professional Edition 1.2x/1.5a-e that results in this service
crashing if it receives a DNS response with over 100 MX records. A
remote attacker can exploit this to perform a DoS attack against the
SMTP server on the target.

***** Nessus has determined the vulnerability exists on the target
***** simply by looking at the version number of MailEnable
***** installed there.

Solution : Upgrade to MailEnable Standard Edition 1.8 / Professional
Edition 1.5e or greater.

Risk factor : Low