Description
SMTP service in MailEnable Standard, Professional, and Enterprise before ME-10014 (20060904) allows remote attackers to cause a denial of service via an SPF lookup for a domain with a large number of records, which triggers a null pointer exception.
References
- ADV-2006-3669 vdb-entry
- 1016792 vdb-entry
- mailenable-spf-dos(28910) vdb-entry
- http://www.mailenable.com/hotfix/
- 20091 vdb-entry
- http://www.mailenable.com/hotfix/MESMTPC.ZIP
- 21998 third-party-advisory