1981 matches found
Sendmail MAIL FROM Command Arbitrary Remote Command Execution
The remote SMTP server did not complain when issued the command : MAIL FROM: |testing This probably means that it is possible to send mail that will be bounced to a program, which is a serious threat, since this allows anyone to execute arbitrary commands on this host. This security hole might be...
aix.security.fixes.txt
Date: Thu, 6 May 1999 11:15:15 +0200 From: Ciaran Deignan To: [email protected] Subject: AIX Security Fixes Update The IBM mail server just distributed the following file. This information has been integrated into the bullcheck verification tool version 1.0.9904.1 available from...
ntmail3relay.txt
NTMail version 3 relay problem NTmail3 appears to have a small hole that allows anyone to use an NTmail3 server as a relay mail server. Basically here is how it works. NTmail3 is set to not allow relay either the TO or FROM address must be local JUCE a $500 antispamming add-on from the makers of...
qmail-DoS-anonymous.txt
Date: Tue, 5 Jan 1999 22:41:44 -0000 From: D. J. Bernstein To: [email protected] Subject: Re: Anonymous Qmail Denial of Service News flash: There are dozens of denial-of-service attacks on every MTA. Example: Any Internet user can create a continuing torrent of mail from random Internet...
SLMail HELO Command Remote Overflow
There might be a buffer overflow when this MTA is issued the 'HELO' command issued by a too long argument. This problem may allow an attacker to execute arbitrary code on this computer, subject to the privileges under which the service operates, or to deny service to legitimate users of the serve...
NTMail3 Arbitrary Mail Relay
Nessus has detected that the remote SMTP server allows anyone to use it as a mail relay provided that the source address is set to ''. This issue allows any spammer to use your mail server to send their mail to the world, thus flooding your network bandwidth and possibly getting your mail server...
MTA Open Mail Relaying Allowed
Nessus has detected that the remote SMTP server allows mail relaying. This issue allows any spammer to use your mail server to send their mail to the world, thus flooding your network bandwidth and possibly getting your mail server blacklisted. C Tenable Network Security, Inc. include'compat.inc'...
Multiple Mail Server EXPN/VRFY Information Disclosure
The remote SMTP server answers to the EXPN and/or VRFY commands. The EXPN command can be used to find the delivery address of mail aliases, or even the full name of the recipients, and the VRFY command may be used to check the validity of an account. Your mailer should not allow remote users to u...
FloosieTek FTGate 2.1 - Web File Access
FloosieTek FTGate 2.1 - Web File Access source: https://www.securityfocus.com/bid/280/info A vulnerability in Floosietek's FTGate allows remote malicious users to steal local files. Floosietek's FTGate is a Win32 mail server program. One of its features is allowing administrators to check the...
Gordano NTMail 4.2 - Web File Access
Gordano NTMail 4.2 - Web File Access source: https://www.securityfocus.com/bid/279/info A vulnerability in Gordano's NTMail allows remote malicious users to steal local files. Gordano's NTMail is a Windows NT mail server program. One of its features is allowing administrators to configure the...
FloosieTek FTGate 2.1 - Web File Access
source: https://www.securityfocus.com/bid/280/info A vulnerability in Floosietek's FTGate allows remote malicious users to steal local files. Floosietek's FTGate is a Win32 mail server program. One of its features is allowing administrators to check the status of the mail server using a web brows...
Computalynx CMail 2.3 - Web File Access
/ source: https://www.securityfocus.com/bid/281/info A vulnerability in Computalynx's CMail allows remote malicious users to steal local files. Compulynx's CMail is a Win32 mail server program. One of its features is allowing users to access their email with a web browser via a built-in web serve...
CVE-1999-1012
SMTP component of Lotus Domino 4.6.1 on AS/400, and possibly other operating systems, allows a remote attacker to crash the mail server via a long string...
CVE-1999-0512
A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers...
CVE-1999-0531
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration CCE. Notes: the former description i...
PT-1999-1175 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A mail server issue allows abuse by spammers due to explicit configuration to permit SMTP mail relay. Recommendations: At the moment, there is no information about a newer version...
CVE-1999-1113
Buffer overflow in Eudora Internet Mail Server EIMS 2.01 and earlier on MacOS systems allows remote attackers to cause a denial of service via a long USER command to port 106...
Qualcomm Eudora Internet Mail Server 1.2 - Remote Buffer Overflow
source: https://www.securityfocus.com/bid/75/info There appears to be a buffer overflow in Qualcomm's Eudora Internet Mail Server. If you connect to its TCP port number 106 and issue the USER command followed by a string over than a thousand bytes in length the server will crash possibly taking...