Description
Format string vulnerability in the SMTP server component in Qbik WinGate 5.x and 6.x before 6.2.2 allows remote attackers to cause a denial of service (service crash) via format string specifiers in certain unexpected commands, which trigger a crash during error logging.
References
- http://www.harmonysecurity.com/HS-A007.html
- http://www.wingate.com/news.php?id=50
- 3001 third-party-advisory
- 25272 vdb-entry
- 25303 vdb-entry
- qbik-smtp-dos(35950) vdb-entry
- 20070810 [HS-A007] Qbik WinGate Remote Denial of Service mailing-list
- 26412 third-party-advisory
- ADV-2007-2859 vdb-entry