Computalynx CMail Web Interface CPU Consumption DoS Vulnerability

ComputaLynx CMail's Web Interface, which resides on port 8002 by default, is vulnerable to a temporary CPU utilization DoS (which could theoretically be rendered more serious with repeated attacks). After connecting to the service, it is possible to enter a long username (around 200k) which will cause CPU use to jump to about 95%. The process releases the CPU after an uncertain amount of time.


 

Privacy Statement
Copyright 2010, SecurityFocus