Design/Logic Flaw

Cisco Email Security Appliance ESA devices with software 8.5.6-106 and 9.5.0-201 allow remote attackers to cause a denial of service per-domain e-mail reception outage by placing malformed DMARC policy data in DNS TXT records for a domain, aka Bug ID CSCuv14806...

PT-2015-6496

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance ESA devices version 8.5.6-106 Cisco Email Security Appliance ESA devices version 9.5.0-201 Description The issue allows remote attackers to cause a denial of service, resulting in a per-domain email reception...

CVE-2015-4278: Improper Input Validation

Cisco Email Security Appliance ESA devices with software 8.5.6-106 and 9.5.0-201 allow remote attackers to cause a denial of service per-domain e-mail reception outage by placing malformed DMARC policy data in DNS TXT records for a domain, aka Bug ID CSCuv14806...

Cisco Email Security Appliance Malformed DMARC Policy Records File Modification Vulnerability

A vulnerability in the Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to generate malformed Domain-Based Message Authentication, Reporting, and Conformance DMARC policy records to the targeted system. The vulnerability occurs because the affected ESA is not abl...

Scientific Linux Security Update : mailman on SL7.x x86_64 (20150623)

-- It was found that mailman did not sanitize the list name before passing it to certain MTAs. A local attacker could use this flaw to execute arbitrary code as the user running mailman. CVE-2015-2775 Previously, it was impossible to configure Mailman in a way that Domain-based Message...

RedHat Update for mailman RHSA-2015:1153-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : mailman (RHSA-2015:1153)

Updated mailman packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

CentOS 7 : mailman (CESA-2015:1153)

Updated mailman packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

Moderate: Red Hat Security Advisory: mailman security and bug fix update

Updated mailman packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

Whisper: Missing DMARC record

Valid when posted however no longer applies...

Block.io: SMPT Protection not used, I can hijack your email server.

Description Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy combining SPF, DKIM, and DMARC but I don't see taht from block.io , You should apply strict SMPT policy to stop spoofed email sending from your domain. POC is attached. Exploit...

DEBIAN-CVE-2014-2957

The dmarcprocess function in dmarc.c in Exim before 4.82.1, when EXPERIMENTALDMARC is enabled, allows remote attackers to execute arbitrary code via the From header in an email, which is passed to the expandstring function...

CVE-2014-2957

The dmarcprocess function in dmarc.c in Exim before 4.82.1, when EXPERIMENTALDMARC is enabled, allows remote attackers to execute arbitrary code via the From header in an email, which is passed to the expandstring function...

Code injection

The dmarcprocess function in dmarc.c in Exim before 4.82.1, when EXPERIMENTALDMARC is enabled, allows remote attackers to execute arbitrary code via the From header in an email, which is passed to the expandstring function...

PT-2014-4982

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.82.1 Description The issue allows remote attackers to execute arbitrary code via the From header in an email, which is passed to the expand string function. This occurs when the EXPERIMENTAL DMARC feature is enabled...

openSUSE Security Update : exim (openSUSE-SU-2014:0983-1)

"Changes in exim : - Silence static checkers; beo1506. - update to 4.83 This release of Exim includes one incompatible fix : + the behavior of expansion of arguments to math comparison functions , was unexpected, expanding the values twice; CVE-2014-2972; bnc888520 This release contains the...

FreeBSD : exim -- Remote Code Execution (f99a4686-e694-11e3-9032-000c2980a9f3)

The exim development team reports : When built with DMARC support, 4.82 is vulnerable to a remote code exeuction flaw. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated security patch has been cancelled. Disabled on 2014/06/02. C Tenable Network Security, Inc. Th...

Yahoo's New DMARC Policy Destroys Every Mailing List across the World

Yahoo! The one who enabled the HTTPS connections by default from the beginning of this year, the one who encrypts traffic moving between its data centers from 31st March, now has been accused of harming every Mailing List across the world. Experts from the Internet Engineering Council John R...

Twitter added DMARC support to prevent email phishing

Twitter announced via its blog today that it has begun using a new method called Domain-based Message Authentication, Reporting and Conformance DMARC to help prevent email phishing. DMARC is actually a standard for preventing email spoofing, in order to make it harder for attackers to send phishi...

Twitter added DMARC support to prevent email phishing

Twitter announced via its blog today that it has begun using a new method called Domain-based Message Authentication, Reporting and Conformance DMARC to help prevent email phishing. DMARC is actually a standard for preventing email spoofing, in order to make it harder for attackers to send phishi...