Description
Ability Mail Server before 2.61 allows remote authenticated users to cause a denial of service (daemon crash) via (1) malformed number list ranges in unspecified IMAP commands, and possibly (2) a blank string in unspecified messages.
References
- 42400 vdb-entry
- 26514 vdb-entry
- 27736 third-party-advisory
- 42399 vdb-entry
- http://www.code-crafters.com/abilitymailserver/updatelog.html
- ability-blank-string-dos(38586) vdb-entry
- ability-imap4-dos(38587) vdb-entry