Description
HTTPMail service in MailEnable Professional 1.18 does not properly handle arguments to the Authorization header, which allows remote attackers to cause a denial of service (null dereference and application crash). NOTE: This is a different vulnerability than CVE-2005-1348.
References
- 20040516 RE: Remote Buffer Overflow in MailEnable HTTPMail mailing-list
- 11588 third-party-advisory
- http://www.oliverkarow.de/research/MailWebHTTPAuthCrash.txt