vendor:
BaSoMail Server
by:
Ziv Kamir
N/A
CVSS
N/A
Denial of Service
CWE
Product Name: BaSoMail Server
Affected Version From: v1.24
Affected Version To: v1.24
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested: Windows
2004
BaSoMail Server POP3 and SMTP v1.24 D.o.S
This exploit sends a HELO request packet containing 30K of data to the BaSoMail Server POP3 and SMTP v1.24. If used at least 3 times, it will cause a Denial of Service (D.o.S) on the SMTP and POP services. This exploit was discovered by Ziv Kamir and exploited by KaGra. It has been tested on Windows XP SP1 English.
Mitigation:
Unknown