PDA

View Full Version : SurgeMail Webmail Host Header DoS



newsbot
19-12-2007, 12:11 AM
SurgeMail Mail Server (http://netwinsite.com/surgemail/) Software Suite "combines advanced features, high performance and ease of use. Ideal on Windows, UNIX ( Linux, Solaris etc.), Mac OSX, FreeBSD and others, this integrated email server is an Antispam Server, Antivirus Server, Webmail Server, Groupware Server, Blog Server and much more". A vulnerability in the way SurgeMail handles the Host field allows remote attackers to cause the product to crash.

http://www.securiteam.com/exploits/6S00G2AKKM.html