EUVD-2007-6539

Malware in sbrugna...

Design/Logic Flaw

QK SMTP Server 3 allows remote attackers to cause a denial of service daemon crash via a long 1 HELO, 2 MAIL FROM, or 3 RCPT TO command; or 4 a long string in the message sent after the DATA command; possibly a related issue to CVE-2006-5551...

CVE-2006-5551

QK SMTP Server (3.01 and earlier) is affected by a stack-based buffer overflow in the RCPT TO handling. The vulnerability could allow remote attackers to execute arbitrary code, as described in CVE-2006-5551 with CVSS v2 base score 7.5 (Network, Low complexity, No auth, Partial confidentiality/in...