Imate WebMail Denial of Service
Reported June 1 by
Delphis Consulting Internet Security Team

VERSIONS EFFECTED
Imate WebMail 2.5

DESCRIPTION

The SMTP mail service can be made to crash by sending a string of 1119 characters as a parameter to the HELO command.

HELO <1119 characters>

VENDOR RESPONSE

The vendor, Concatus, is aware of the problem and has released a patch which is available from their support department.

CREDITS
Discovered and reported by Delphis Consulting Internet Security Team