vpopmail vchkpw USER/PASS Command Format String
Medium Nessus Plugin ID 10463
SynopsisThe remote web server has a PHP script that is affected by a denial of service vulnerability.
DescriptionThe remote vpopmail server is vulnerable to an input validation bug that could allow any user to crash the server by providing a specially crafted username.
SolutionUpgrade to vpopmail 4.8 or later.