VULHUB ™

Floosietek FTGatePRO and FTGateOffice are high performance, feature rich mail servers for the Microsoft Windows operating system. The POP3 USER command is used to identify the client user. FTGate locks the mailbox of the given user when this command is received. As this may be done before authentication is complete, it is possible for a malicious attacker to lock the mailbox of another known user through the use of this command.

Floosietek FTGatePRO and FTGateOffice are high performance, feature rich mail servers for the Microsoft Windows operating system. The POP3 USER command is used to identify the client user. FTGate locks the mailbox of the given user when this command is received. As this may be done before authentication is complete, it is possible for a malicious attacker to lock the mailbox of another known user through the use of this command.