Unspecified vulnerability in Code-Crafters Ability Mail Server before 2.70 allows remote attackers to cause a denial of service (daemon crash) via an IMAP4 FETCH command.

The remote host appears to be running Ability Mail Server. 

According to its banner, the IMAP service component of the installed version of Ability Mail Server fails to correctly parse FETCH commands.  By sending a specially crafted FETCH command, an attacker may be able to exploit this vulnerability to crash the IMAP server.

The remote host appears to be running Ability Mail Server < 2.70.  Such versions are potentially affected by an issue caused by an unspecified error when handling IMAP version 4 FETCH commands.  An attacker could exploit this flaw to crash the affected service.

ID	Name	Product	Family	Type	Severity
41644	Ability Mail Server < 2.70 IMAP4 FETCH DoS	Nessus	Misc.	Remote	medium
5187	Ability Mail Server < 2.70 Remote Denial of Service	Nessus Network Monitor	Web Servers		medium
5186	Ability Mail Server < 2.70 Remote Denial of Service	Nessus Network Monitor	POP Server		medium
5185	Ability Mail Server < 2.70 Remote Denial of Service	Nessus Network Monitor	SMTP Servers		medium
5184	Ability Mail Server < 2.70 Remote Denial of Service	Nessus Network Monitor	IMAP Servers		medium

Detections

Analytics

CVE-2009-3445

high

Tenable Plugins

medium

medium

medium

medium

medium