Description
The SMTP service in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service (infinite loop) via a message in which neither the originator nor recipient address is known.
References
- 18462 vdb-entry
- ADV-2006-2354 vdb-entry
- 20432 third-party-advisory
- http://www.atrium-software.com/download/McrReadMe_EN.html
- mercur-email-dos(27230) vdb-entry