[#JAMES-535] Denial of service (CPU consumption) via a long argument to the MAIL command.

JAMES Server

Denial of service (CPU consumption) via a long argument to the MAIL command.

Created: 15/Jun/06 03:54 PM Updated: 21/Nov/07 08:31 AM

Return to search

Component/s:

SMTPServer

Affects Version/s:

2.2.0, 2.3.0

Fix Version/s:

2.3.0

Time Tracking:

Not Specified

Resolution Date:

16/Jun/06 04:02 AM

Description

« Hide

The SMTP server in Apache Java Mail Enterprise Server (aka Apache James) 2.2.0 allows remote attackers to cause a denial of service (CPU consumption) via a long argument to the MAIL command.

See:
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2806

All

Comments

Work Log

Change History

Subversion Commits

Sort Order:

[ Permlink | « Hide ]

Noel J. Bergman added a comment - 16/Jun/06 04:02 AM

Should be resolved in the v2.3 release branch and in trunk.

[ Permlink | « Hide ]

Danny Angus added a comment - 21/Nov/07 08:31 AM

Closing issue fixed in released version.