Exploit TFS Gateway 4.0 - Denial of Service

[Exploiter]

EDB-ID

19477

Проверка EDB

1. Пройдено

Автор

ANONYMOUS

Тип уязвимости

DOS

Платформа

HARDWARE

CVE

cve-1999-1515

Дата публикации

1999-08-31

TFS Gateway 4.0 - Denial of Service

source: https://www.securityfocus.com/bid/613/info

TFS Gateway 4.0, when configured in a specific non-default manner, is vulnerable to a remotely exploitable denial of service attack. If 'return entire message to sender' is enabled for failed send attempts, and an email is sent to the TFS Gateway with 1: the From: address set to an invalid address on a remote machine and 2: an invalid To: address on the target machine, the gateway will attempt to return the complete message once every 10 seconds until an administrator manually stops it. If enough emails of sufficient size of this nature are sent it can lead to a degradation or denial of service.

telnet to Gateway smtp server and enter the following commands:

HELO
MAIL FROM: [email protected]
RCPT TO: [email protected]
DATA

.
QUIT