Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-1999-1265

Overview

Vulnerability Score 5.0 5.0
CVE Id CVE-1999-1265
Last Modified 05 Sep 2008 04:19:06
Published 22 Sep 1998 12:00:00
Confidentiality Impact NONE NONE
Integrity Impact NONE NONE
Availability Impact PARTIAL PARTIAL
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-1999-1265

Summary

SMTP server in SLmail 3.1 and earlier allows remote attackers to cause a denial of service via malformed commands whose arguments begin with a "(" (parenthesis) character, such as (1) SEND, (2) VRFY, (3) EXPN, (4) MAIL FROM, (5) RCPT TO.

Vulnerable Systems

Application

  • Seatle Lab Software Slmail 3.1


References

XF - slmail-parens-overload(1664)

NTBUGTRAQ - 19980922 WARNING! SMTP Denial of Service in SLmail ver 3.1


Last Updated: 27 May 2016 10:35:21