3424 matches found
CVE-2004-1291: Undefined Security Weakness
Buffer overflow in qwik-smtpd allows remote attackers to use the server as an SMTP spam relay via a long HELO command, which overwrites the adjacent localIP data buffer...
QwikMail 0.3 - HELO Buffer Overflow (PoC)
QwikMail 0.3 - HELO Buffer Overflow PoC source: www.securityfocus.com/bid/11989/info QwikMail qwik-smtpd is reported prone to a remotely exploitable buffer overflow vulnerability. The issue is due to insufficient bounds checking of client-supplied SMTP HELO request data. This issue could...
QwikMail 0.3 - 'HELO' Buffer Overflow (PoC)
source: www.securityfocus.com/bid/11989/info QwikMail qwik-smtpd is reported prone to a remotely exploitable buffer overflow vulnerability. The issue is due to insufficient bounds checking of client-supplied SMTP HELO request data. This issue could theoretically be exploited to execute arbitrary...
CVE-2004-0833
CVE-2004-0833 affects Debian GNU/Linux Sendmail prior to 8.12.3 when sasl/sasl-bin is used. The Debian security advisory indicates that the Sendmail configuration script initializes the sasl database with a fixed username and password, enabling a remote attacker to use Sendmail as an open mail re...
CVE-2004-0833
Sendmail before 8.12.3 on Debian GNU/Linux, when using sasl and sasl-bin, uses a Sendmail configuration script with a fixed username and password, which could allow remote attackers to use Sendmail as an open mail relay and send spam messages...
CVE-2004-0833
Sendmail before 8.12.3 on Debian GNU/Linux, when using sasl and sasl-bin, uses a Sendmail configuration script with a fixed username and password, which could allow remote attackers to use Sendmail as an open mail relay and send spam messages...
CVE-2004-0833: Undefined Security Weakness
Sendmail before 8.12.3 on Debian GNU/Linux, when using sasl and sasl-bin, uses a Sendmail configuration script with a fixed username and password, which could allow remote attackers to use Sendmail as an open mail relay and send spam messages...
Debian DSA-287-1 : epic - buffer overflows
Timo Sirainen discovered several problems in EPIC, a popular client for Internet Relay Chat IRC. A malicious server could craft special reply strings, triggering the client to write beyond buffer boundaries. This could lead to a denial of service if the client only crashes, but may also lead to...
Debian DSA-437-1 : cgiemail - open mail relay
A vulnerability was discovered in cgiemail, a CGI program used to email the contents of an HTML form, whereby it could be used to send email to arbitrary addresses. This type of vulnerability is commonly exploited to send unsolicited commercial email spam. %NASLMINLEVEL 70300 C Tenable Network...
[SECURITY] [DSA 554-1] New sendmail packages fix potential open relay
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 554-1 [email protected] http://www.debian.org/security/ Martin Schulze September 27th, 2004 http://www.debian.org/security/faq -...
Debian GNU/Linux Sendmail Default SASL Password
The remote host is running a Sendmail server with a default SASL password of 'sendmail' / 'sendmailpwd'. A spammer may use this account to use the remote server as a spam relay for the internet. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid14832; scriptversion"1.16...
[SECURITY] [DSA 554-1] New sendmail packages fix potential open relay
-------------------------------------------------------------------------- Debian Security Advisory DSA 554-1 [email protected] http://www.debian.org/security/ Martin Schulze September 27th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 554-1] New sendmail packages fix potential open relay
-------------------------------------------------------------------------- Debian Security Advisory DSA 554-1 [email protected] http://www.debian.org/security/ Martin Schulze September 27th, 2004 http://www.debian.org/security/faq -...
Promiscuous email printing in Canon imageRunner
The Canon iR5000i digital printer and probably other imageRunner models has a somewhat undocumented print-from-email feature. Any text/plain email sent to port 25 on the device will be printed. The MAIL FROM and RCPT TO values are not authenticated or even checked for syntax. There appears to be ...
CVE-2002-1278
CVE-2002-1278 affects Linuxconf’s mailconf module (Linuxconf 1.24 and earlier than 1.28) on Conectiva Linux 6.0–8 (and possibly other distros). The vulnerability stems from generating sendmail.cf in a way that leaves Sendmail configured as an open relay, enabling remote attackers to send spam. Pu...
CVE-2003-0039
The CVE-2003-0039 entry concerns ISC dhcrelay (dhcp-relay) up to version 3.0rc9 (and potentially other builds). A malicious BOOTP packet forwarded to the broadcast MAC ff:ff:ff:ff:ff:ff can cause an infinite loop in the relay, not bounded by hop count, leading to a denial of service against confi...
CVE-2002-1278
The mailconf module in Linuxconf 1.24, and other versions before 1.28, on Conectiva Linux 6.0 through 8, and possibly other distributions, generates the Sendmail configuration file sendmail.cf in a way that configures Sendmail to run as an open mail relay, which allows remote attackers to send Sp...
CVE-2003-0039: Undefined Security Weakness
ISC dhcrelay dhcp-relay 3.0rc9 and earlier, and possibly other versions, allows remote attackers to cause a denial of service packet storm via a certain BOOTP packet that is forwarded to a broadcast MAC address, causing an infinite loop that is not restricted by a hop count...
CVE-2002-1278: Undefined Security Weakness
The mailconf module in Linuxconf 1.24, and other versions before 1.28, on Conectiva Linux 6.0 through 8, and possibly other distributions, generates the Sendmail configuration file sendmail.cf in a way that configures Sendmail to run as an open mail relay, which allows remote attackers to send Sp...