Ability Mail Server before 2.61 allows remote authenticated users to cause a denial of service (daemon crash) via (1) malformed number list ranges in unspecified IMAP commands, and possibly (2) a blank string in unspecified messages.

 The remote host appears to be running Ability Mail Server.  According to its banner, the installed version of Ability Mail Server is affected by two issues that could cause the application to crash.  One involves messages that are changed to a blank string, the other concerns IMAP4 commands with malformed number list ranges.  It is not currently known whether either or both issues can be exploited without authentication.

 The remote host appears to be running Ability POP3 Server.  According to its banner, the installed version of Ability Mail Server is affected by two issues that could cause the application to crash.  One involves messages that are changed to a blank string, the other concerns IMAP4 commands with malformed number list ranges.  It is not currently known whether either or both issues can be exploited without authentication.

 The remote host appears to be running Ability SMTP Server.  According to its banner, the installed version of Ability Mail Server is affected by two issues that could cause the application to crash.  One involves messages that are changed to a blank string, the other concerns IMAP4 commands with malformed number list ranges.  It is not currently known whether either or both issues can be exploited without authentication.

 The remote host appears to be running Ability IMAP Server.  According to its banner, the installed version of Ability Mail Server is affected by two issues that could cause the application to crash.  One involves messages that are changed to a blank string, the other concerns IMAP4 commands with malformed number list ranges.  It is not currently known whether either or both issues can be exploited without authentication.

The remote host appears to be running Ability Mail Server. 

According to its banner, the installed version of Ability Mail Server is affected by two issues that could cause the application to crash. One involves messages that are changed to a blank string, the other IMAP4 commands with malformed number list ranges. 

It is believed that exploitation of either issue requires authentication.

ID	Name	Product	Family	Type	Severity
4293	Ability Mail Server < 2.61 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers		medium
4292	Ability Mail Server < 2.61 Multiple Vulnerabilities	Nessus Network Monitor	POP Server		medium
4291	Ability Mail Server < 2.61 Multiple Vulnerabilities	Nessus Network Monitor	SMTP Servers		medium
4290	Ability Mail Server < 2.61 Multiple Vulnerabilities	Nessus Network Monitor	IMAP Servers		medium
28289	Ability Mail Server < 2.61 Multiple Remote DoS	Nessus	SMTP problems	Remote	medium

Detections

Analytics

CVE-2007-6101

medium

Tenable Plugins

medium

medium

medium

medium

medium