This script is Copyright (C) 1999-2014 Tenable Network Security, Inc.
The remote SMTP server has a buffer overflow vulnerability.
The remote host appears to be running NetManage Chameleon SMTPd.
This version of the software has a remote buffer overflow
vulnerability. Nessus crashed the service by issuing a long argument
to the HELP command. A remote attacker could exploit this issue to
crash the service, or possibly execute arbitrary code.
There is also a buffer overflow related to the HELO command, but
Nessus has not checked for this issue.
See also :
Upgrade to the latest version of this software.
Risk factor :
Critical / CVSS Base Score : 10.0
CVSS Temporal Score : 8.5
Public Exploit Available : false
Family: SMTP problems
Nessus Plugin ID: 10042 (chameleon_smtpd_overflow.nasl)
Bugtraq ID: 2387
CVE ID: CVE-1999-0261
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.