Nessus Plugin #15902

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

MailCarrier SMTP Buffer Overflow Vulnerability

Family:

SMTP problems

Category:

destructive_attack

Copyright:

This script is Copyright (C) 2004 George A. Theall

Summary:

Checks for SMTP Buffer Overflow Vulnerability in MailCarrier

Version:

$Revision: 1.4 $

Cve_id:

-

Bugtraq_id:

11535

Xrefs:

OSVDB:11174

Description:

The target is running at least one instance of MailCarrier in which the
SMTP service suffers from a buffer overflow vulnerability. By sending
an overly long EHLO command, a remote attacker can crash the SMTP
service and execute arbitrary code on the target.

Solution : Upgrade to MailCarrier 3.0.1 or greater.

Risk factor : High