CVE-1999-1504: Medium severity Stalker Stalker Internet Mail Server vulnerability
Stalker Internet Mail Server 1.6 allows a remote attacker to cause a denial of service (crash) via a long HELO command.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Stalker Internet Mail Serverfrom your environment.Uninstall Stalker Internet Mail Server if SMTP functionality is not required, and replace it with an alternative mail server that is not affected.
- Configuration
Stop or disable the SMTP service on the Stalker Internet Mail Server until a vendor patch or fix is available to prevent crashes caused by long HELO commands.
Stalker Internet Mail Server SMTP service = disabled - Compensating control
Restrict network access to the SMTP service (e.g., port 25/587) using firewall rules or ACLs so only trusted IPs or internal mail relays can connect, preventing remote attackers from delivering long HELO commands.
- Compensating control
Place an SMTP gateway/proxy or WAF in front of the server to validate and reject or drop HELO/EHLO commands that exceed expected lengths or are malformed, blocking exploit attempts before they reach the Stalker server.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1504?
CVE-1999-1504 is classified as a denial of service vulnerability, allowing a remote attacker to crash the Stalker Internet Mail Server.
How do I fix CVE-1999-1504?
To address CVE-1999-1504, you should consider upgrading to a newer version of Stalker Internet Mail Server that has patched this vulnerability.
What systems are affected by CVE-1999-1504?
CVE-1999-1504 specifically affects Stalker Internet Mail Server version 1.6.
Can CVE-1999-1504 be exploited remotely?
Yes, CVE-1999-1504 can be exploited by an attacker remotely through the use of a specially crafted long HELO command.
What impact does CVE-1999-1504 have on my server?
Exploitation of CVE-1999-1504 can lead to a denial of service, causing the Stalker Internet Mail Server to crash and become unavailable.