WebShield SMTP infinite loop DoS Attack

Description: A DoS attack is very easy to implement on most WebShield SMTP setups. Sending E-mail with a "From: " address that includes a period after the domain name will cause an infinite loop using up resources until the server will finally crash. When restarted, the machine will continue to...

DST2K0003.txt

================================================================================ Delphis Consulting Plc ================================================================================ Security Team Advisories 08/05/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

CVE-2000-0447

Buffer overflow in WebShield SMTP 4.5.44 allows remote attackers to execute arbitrary commands via a long configuration parameter to the WebShield remote management service...

CVE-2000-0448

The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP address does not resolve to a hostname, which allows remote attackers to access the configuration via the GETCONFIG command...