CVE-1999-1532

Description

Netscape Messaging Server 3.54, 3.55, and 3.6 allows a remote attacker to cause a denial of service (memory exhaustion) via a series of long RCPT TO commands.

Affected products

• netscape / messaging_server3.6 – 3.6
• netscape / messaging_server3.54 – 3.54
• netscape / messaging_server3.55 – 3.55

Exploits & proofs of concept

• exploit-dbNetscape Messaging Server 3.6/3.54/3.55 - 'RCPT TO' Denial of Serviceby Nobuo Miwa

References

• MAILING_LISThttp://marc.info/?l=bugtraq&m=94117465014255&w=2
• MISChttp://www.securityfocus.com/bid/748