Re: Netscape Messaging Server RCPT TO vul.

[n-miwa () LAC CO JP (Nobuo Miwa)]

Thank you for good information.

But, Netscape Messaging Server(NMS) cannot filter following
patterns..

rcpt to: rcpt to: postmaster () somewhere dom  <-- correct address
rcpt to: rcpt to: postmaster () somewhere dom
  ...
  unlimited times
  ...

I guess NMS allocate all RCPT TO in NT's memory by malloc() and
somehow they never free them. That's the problem.
AND you cannot see any log after this attack.

Ciao

<Nobuo Miwa> n-miwa () lac co jp  ( @ @ ) http://www.lac.co.jp/security/
--------------------------o00o--(. .)--o00o--------------------------