This script is Copyright (C) 2006-2014 Tenable Network Security, Inc.
The remote ph service is affected by a buffer overflow vulnerability.
The remote host is running the Mercury Mail Transport System, a free
suite of server products for Windows and Netware associated with
The remote installation of Mercury includes a ph server that is
vulnerable to buffer overflow attacks. By leveraging this issue, an
unauthenticated, remote attacker is able to crash the remote service
and possibly execute arbitrary code remotely.
See also :
Install the Jan 2006 Mercury/32 Security patches for MercuryW and
MercuryH from http://www.pmail.com/patches.htm.
Risk factor :
High / CVSS Base Score : 7.5
CVSS Temporal Score : 6.2
Public Exploit Available : true