[602] in Best-of-Security
BoS: Bug in IMail's pop3d32.exe
daemon@ATHENA.MIT.EDU (RHS Linux User)
Sat Mar 14 01:15:12 1998
XDelivering-To: best-of-security@cyber.com.au
Delivering-To: best-of-security@cyber.com.au
Date: Thu, 29 Jan 1998 13:21:33 -0500
Reply-To: RHS Linux User <james@COWS.ML.ORG>
From: RHS Linux User <james@COWS.ML.ORG>
Old-X-Originally-To: To: BUGTRAQ@NETSPACE.ORG
Old-X-Originated-From: From: RHS Linux User <james@COWS.ML.ORG>
Errors-To: best-of-security-request@cyber.com.au
To: best-of-security@cyber.com.au
Resent-From: best-of-security@cyber.com.au
The platform: Windows NT 4.00 with service pack 3
Imail popd version:
+OK X1 NT-POP3 Server abraham.integrityonline10.com (IMail 4.02 38-3)
The problem:
There appears to be a problem with IMail's pop3 server for Windows NT. If
you connect to the pop3 port (110 for those kiddies out there) and send a
very long USER string such as: USER NNNNNNNNNNNNNN<a few thousand more>, the
pop3 daemon will jump to 99% CPU usage and stay. I am at work and I don't
have the time to investigate it more fully. The pop3 daemon will still
accept connections, however the computer is slowed down greatly. I have not
tested other daemons in Imail's package such as IMAP or SMTP.
James
james@cows.ml.org
