exploit-db-mirror/platforms/windows/dos/21673.txt
Offensive Security fffbf04102 Updated
2013-12-03 19:44:07 +00:00

9 lines
No EOL
603 B
Text
Executable file

source: http://www.securityfocus.com/bid/5365/info
IMail is a commercial email server software package distributed and maintained by Ipswitch, Incorporated. IMail is available for Microsoft Operating Systems.
When a HTTP POST command is made to the web calendaring service on port 8484, and the "content-length:" header field is blank, the service becomes unstable. It has been reported that such a transaction with the service results in a crash of the iwebcal service.
An attacker may exploit this vulnerability by submitting the following request to a vulnerable server:
POST / HTTP/1.0