Gordano Messaging Suite 9.0 WWW.exe Denial of Service Vulnerability

ID EDB-ID:23130
Type exploitdb
Reporter Phuong Nguyen
Modified 2003-09-10T00:00:00


Gordano Messaging Suite 9.0 WWW.exe Denial of Service Vulnerability. Dos exploit for windows platform

                                            source: http://www.securityfocus.com/bid/8576/info

It has been reported that Gordano Messaging Suite may be prone to a denial of service issue allowing a remote attacker to send malformed HTTP GET requests to cause the WWW.exe process to crash.

The problme may lead to the termination of services such as Administration, WebMail Professional, WebMail Express, WebMail Mobile, Instant Messaging, and Web Server services, which are provided by the WWW.exe process.

It should be noted that only the WWW.exe process on a Windows system will crash under this condition, on Linux the connection will simply hang without timing out. 

~$ telnet
Connected to
Escape character is '^]'.
GET /../.. HTTP/1.0