CVE-2006-4210

CVE-2006-4210 describes a vulnerability in nu_mail.inc.php of Andreas Kansok’s phPay 2.02/2.02.1 where, if register_globals is enabled, a remote attacker can abuse the server as an open mail relay via manipulated parameters (mail_text2, user_row[5], nu_mail_1, shop_mail). The root cause is improp...

CVE-2006-3416

Tor before 0.1.1.20 kills the circuit when it receives an unrecognized relay command, which causes network circuits to be disbanded. NOTE: while this item is listed under the "Security fixes" section of the developer changelog, the developer clarified on 20060707 that this is only a self-DoS...

DEBIAN-CVE-2006-3416

Tor before 0.1.1.20 kills the circuit when it receives an unrecognized relay command, which causes network circuits to be disbanded. NOTE: while this item is listed under the "Security fixes" section of the developer changelog, the developer clarified on 20060707 that this is only a self-DoS...

PT-2006-4307 · Tor · Tor

Name of the Vulnerable Software and Affected Versions: Tor versions prior to 0.1.1.20 Description: The issue causes Tor to kill the circuit when it receives an unrecognized relay command, leading to network circuits being disbanded. This is considered a self-DoS. Recommendations: For versions pri...

e107 email.php Arbitrary Mail Relay

The version of e107 installed on the remote host contains a script, 'email.php' that allows an unauthenticated user to send email messages to arbitrary users and to control, to a large degree, the content of those messages. This issue can be exploited to send spam or other types of abuse through...

Cisco Security Advisory: AVS TCP Relay Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: AVS TCP Relay Vulnerability Advisory ID: cisco-sa-20060510-avs http://www.cisco.com/warp/public/707/cisco-sa-20060510-avs.shtml Revision 1.0 For Public Release 2006 May 10 1600 UTC GMT...

AVS TCP Relay Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

CVE-2006-0977

Craig Morrison Mail Transport System Professional aka MTS Pro acts as an open relay when configured to relay all mail through an external SMTP server, which allows remote attackers to relay mail by connecting to the MTS Pro server, then sending a MAIL FROM that specifies a domain that is local to...

CVE-2006-0977

The CVE-2006-0977 entry concerns Craig Morrison Mail Transport System Professional (MTS Pro), which acts as an open mail relay when configured to forward all mail to an external SMTP server. The vulnerability allows remote attackers to relay messages by connecting to the MTS Pro server and issuin...

CVE-2006-0977

Craig Morrison Mail Transport System Professional aka MTS Pro acts as an open relay when configured to relay all mail through an external SMTP server, which allows remote attackers to relay mail by connecting to the MTS Pro server, then sending a MAIL FROM that specifies a domain that is local to...

Mail Transport System Professional open mail relay

Mail relayed without IP address verification if smart host ISP relay is configured...

MTS Professional < 1.61.1.85 SMTP Open Relay

Binary data 3448.prm...

Mail Transport System Professional--Open Relay Hole

What: Mail Transport System Professional is a RFC compliant mail server for Windows. Who: http://www.mtsprofessional.com/ Problem: Open relay hole when forwarding all outgoing mail through an ISP. When configured to forward all outgoing mail through an ISP MTS Pro will accept and forward all...

Ubuntu 4.10 : postfix vulnerability (USN-74-1)

Jean-Samuel Reynaud noticed a programming error in the IPv6 handling code of Postfix when /proc/net/ifinet6 is not available which is the case in Ubuntu since Postfix runs in a chroot. If 'permitmxbackup' was enabled in the 'smtpdrecipientrestrictions', Postfix turned into an open relay, i. e...

security flaw

The IRC protocol dissector in Ethereal 0.10.13 allows remote attackers to cause a denial of service infinite loop...

CVE-2005-2316

Domain Name Relay Daemon DNRD before 2.19.1 allows remote attackers to cause a denial of service infinite recursion via a DNS packet that uses message compression in the QNAME and two pointers that point to each other circular buffer...

Mail relaying (thorough test)

The remote SMTP server appears to be insufficiently protected against relaying This means that spammers might be able to use your mail server to send their mails to the world. OpenVAS Vulnerability Test $Id: smtprelay2.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Mail relaying thorough te...

DB4Web TCP relay

DB4Web debug page allows anybody to scan other machines. You may be held for responsible. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

DB4Web TCP relay

DB4Web debug page allows anybody to scan other machines. You may be held for responsible. OpenVAS Vulnerability Test $Id: db4webtcprelay.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: DB4Web TCP relay Authors: Michel Arboi Copyright: Copyright C 2002 Michel Arboi This program is free...

Mail relaying (thorough test)

The remote SMTP server appears to be insufficiently protected against mail relaying. SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...