Unscored CVE-1999-1265 EUVD-1999-1246GHSA-68wf-hv6w-35mw

SMTP server in SLmail 3.1 and earlier allows remote attackers to cause a denial of service via malformed commands whose arguments begin wit…

Published Sep 12, 2001 · Updated Aug 1, 2024 · Assigned by mitre

Description

SMTP server in SLmail 3.1 and earlier allows remote attackers to cause a denial of service via malformed commands whose arguments begin with a "(" (parenthesis) character, such as (1) SEND, (2) VRFY, (3) EXPN, (4) MAIL FROM, (5) RCPT TO.

References

slmail-parens-overload(1664) vdb-entry
19980922 WARNING! SMTP Denial of Service in SLmail ver 3.1 mailing-list
19980922 WARNING! SMTP Denial of Service in SLmail ver 3.1 mailing-list