COMMAND

    Imate

SYSTEMS AFFECTED

    Imate WebMail Server v2.5

PROBLEM

    Following  is  based  on  Delphis  Consulting  Plc  Security  Team
    Advisory.   Delphis  Consulting  Internet  Security  Team  (DCIST)
    discovered  the  following  vulnerability  in  the  Imate  WebMail
    Server under Windows NT.   Sending an email via  SMTP to an  Imate
    WebMail Server with  a server name  of 1119 characters  will cause
    the SMTP server  to stop running.   The service must  be restarted
    manually.  Example:

        Telnet host 25
        HELO <Ax1119>

SOLUTION

    Catware have an upgrade  available from their support  department.
    Delphis would like to take  this opportunity to thank Catware  for
    responding so  quickly (within  24hrs), and  having a  working fix
    within 96hrs.