CVE-2008-1689: Medium severity slmail vulnerability
Stack consumption vulnerability in WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service (daemon crash) via a long request header in an HTTP request to TCP port 801. NOTE: some of these details are obtained from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-1689?
CVE-2008-1689 is classified as a denial of service vulnerability, which can crash the SLMail Pro daemon.
How do I fix CVE-2008-1689?
To mitigate CVE-2008-1689, upgrade SLMail Pro to version 6.3.2 or later, which addresses this vulnerability.
What versions of SLMail Pro are affected by CVE-2008-1689?
CVE-2008-1689 affects SLMail Pro versions up to and including 6.3.1.0.
What causes the vulnerability described in CVE-2008-1689?
CVE-2008-1689 is caused by stack consumption due to overly long request headers in HTTP requests sent to TCP port 801.
Can CVE-2008-1689 be exploited remotely?
Yes, CVE-2008-1689 can be exploited remotely by sending crafted HTTP requests to the affected SLMail Pro server.