CVE-2008-3607 The IMAP server in NoticeWare Email Server NG 4.6.3 and earlier allows remote attackers to cause a denial of service (daemon crash) via multiple long LOGIN commands.
MediumCVSS 5.0
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The IMAP server in NoticeWare Email Server NG 4.6.3 and earlier allows remote attackers to cause a denial of service (daemon crash) via multiple long LOGIN commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| noticeware email server | <= 4.6.3 | No fix listed |
| noticeware email server | = 4.2.1 | No fix listed |
| noticeware email server | = 4.2.2 | No fix listed |
| noticeware email server | = 4.2.3 | No fix listed |
| noticeware email server | = 4.2.4 | No fix listed |
| noticeware email server | = 4.3.1 | No fix listed |
| noticeware email server | = 4.3.2 | No fix listed |
| noticeware email server | = 4.3.4 | No fix listed |
| noticeware email server | = 4.5.1 | No fix listed |
| noticeware email server | = 4.5.2 | No fix listed |
| noticeware email server | = 4.5.3 | No fix listed |
| noticeware email server | = 4.6.1 | No fix listed |
| noticeware email server | = 4.6.2 | No fix listed |
References
- 4147 third-party-advisory
- 20080808 [AJECT] NoticeWare IMAP Email Server 4.6.2 DoS vulnerability mailing-list
- 30605 exploit vdb-entry
- noticeware-emailserverng-imap-dos(44378) vdb-entry