Security vulnerability in Mercury Mail

The bug affects the current version of the server, version 4.51. Older versions may also be vulnerable. The developer has not yet released a security update. Until a patch becomes available, Mercury mail server administrators should restrict access to trusted persons and computers.

Read the article HERE.

Secunia Advisory: SA26519
Release Date: 2007-08-20
Critical: Highly critical
Impact: System access
Where: From remote
Solution Status: Unpatched