Nosque Workshop MsgCore 1.9 - Denial of Service Vulnerability

ID EDB-ID:19725
Type exploitdb
Reporter Ussr Labs
Modified 2000-01-13T00:00:00


Nosque Workshop MsgCore 1.9 Denial of Service Vulnerability. CVE-2000-0075. Dos exploit for windows platform


There is a denial of service condition in Nosque Workshop's MsgCore SMTP server. The problem lies in memory used to store server input not being deallocated and eventually exhausted, causing the target NT host to freeze requiring a reboot. If a smtp client (or user sending input manually) sends multiple sequences of "HELO/ MAIL FROM/ RCPT TO / DATA" in a single connection, the memory allocated to store all of those values will not be freed and the target will stop functioning once memory runs out.