Kerio MailServer < 6.3.1 Long LDAP Query DoS
Medium Nessus Plugin ID 23868
SynopsisThe remote LDAP server is prone to a denial of service attack.
DescriptionThe remote host is running Kerio MailServer, a commercial mail server available for Windows, Linux, and Mac OS X platforms.
According to its banner, the LDAP service associated with the installed version of Kerio MailServer terminates abnormally when it receives certain malformed LDAP search requests. An unauthenticated, remote attacker can exploit this issue to deny access to legitimate users.
SolutionUpgrade to Kerio MailServer 6.3.1 or later.