vendor:
WorldClient
by:
SecurityFocus
7.5
CVSS
HIGH
Denial of Service
119
CWE
Product Name: WorldClient
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: No
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2001
Alt-N’s WorldClient Denial of Service
Alt-N's WorldClient is an email webserver that allows its users to retrieve email via HTTP. It is susceptible to denial of service attacks due to an unchecked buffer in the request handler. By supplying a long URL to the server, it can be crashed.
Mitigation:
Ensure that all requests are properly validated and checked for buffer overflows.