Gordano NTMail Web Configuration Denial of Service Vulnerability

Gordano NTMail includes a Web configuration service, which runs on port 8000 by default. This service does not properly flush incomplete HTTP requests, making NTMail susceptible to a denial of service attack. A malicious user can cause the application to crash by sending multiple incomplete HTTP requests to it. CPU utilization will eventually reach 100%, causing the application to stop responding.

If successfully exploited, then you must restart the service in order to regain normal functionality.

Upgrade to the latest version of NTMail, which is available for download from Gordano's Web site.