PT-2005-4124 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal version 0.10.13 Description: The issue is related to the IRC protocol dissector, which allows remote attackers to cause a denial of service by triggering an infinite loop. Recommendations: For Ethereal version 0.10.13, consider...

CVE-2005-2854

CRLF injection vulnerability in thesitewizard.com chfeedback.pl Feedback Form Perl Script 2.0.1 allows remote attackers to use the script as a mail relay spam proxy via CRLF sequences in the 1 name or 2 email fields, which are injected into mail headers...

CVE-2005-2857

Free SMTP Server 2.2 allows remote attackers to use the server as an open mail relay spam proxy...

CVE-2005-2857

Free SMTP Server 2.2 allows remote attackers to use the server as an open mail relay spam proxy...

CVE-2005-2854

CRLF injection vulnerability in thesitewizard.com chfeedback.pl Feedback Form Perl Script 2.0.1 allows remote attackers to use the script as a mail relay spam proxy via CRLF sequences in the 1 name or 2 email fields, which are injected into mail headers...

CVE-2005-2857

CVE-2005-2857 affects Free SMTP Server 2.2 and allows remote attackers to use the server as an open mail relay (spam proxy). The vulnerability is a remote access issue enabling unauthorized relaying, leading to abuse for sending spam. The provided documents identify the affected software/version ...

Free SMTP Server open relay

Restriction to localhost relaying only doesn't work in default configuration...

Free SMTP Server Open Mail Relay Vulnerability

Secunia Advisory: SA16698 Release Date: 2005-09-05 Critical: Moderately critical Impact: Security Bypass Where: From remote Solution Status: Unpatched Software: Free SMTP Server 2.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. Description:...

CVE-2001-1488

The CVE-2001-1488 entry concerns Open Projects Network Internet Relay Chat (IRC) daemon u2.10.05.18, which does not perform a double-reverse DNS lookup. This information indicates a potential hostname spoofing vulnerability where remote attackers could spoof any valid hostname on the Internet. Th...

CVE-2001-1488

Open Projects Network Internet Relay Chat IRC daemon u2.10.05.18 does not perform a double-reverse DNS lookup, which allows remote attackers to spoof any valid hostname on the Internet. NOTE: a followup post suggests that this is not an issue in the daemon...

CVE-2005-0431

Barracuda Spam Firewall 3.1.10 and earlier does not restrict the domains that white-listed domains can send mail to, which allows members of white-listed domains to use Barracuda as an open mail relay for spam...

CVE-2001-1445

Unknown vulnerability in the SMTP server in Lotus Domino 5.0 through 5.7 allows remote attackers to bypass mail relaying restrictions via crafted e-mail addresses in "RCPT TO" commands...

aeon02a.pl.txt

!/usr/bin/perl Aeon-mail relay agent for Linux written by lammat just for practice purposes tested against aeon-0.2a http://grpower.ath.cx [email protected] execve/bin/sh for linux x86 29 bytes by Matias Sedalo $shellcode = "\x31\xdb\x53\x8d\x43\x17\xcd\x80\x99\x68\x6e\x2f\x73\x68\x68"...

Moderate: Red Hat Security Advisory: dhcp security update

An updated dhcp package that fixes a string format issue is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The dhcp package provides the ISC Dynamic Host Configuration Protocol DHCP server and...

Aeon 0.2a - Local Linux (1)

!/usr/bin/perl Aeon-mail relay agent for Linux written by lammat just for practice purposes tested against aeon-0.2a http://grpower.ath.cx [email protected] execve/bin/sh for linux x86 29 bytes by Matias Sedalo $shellcode = "\x31\xdb\x53\x8d\x43\x17\xcd\x80\x99\x68\x6e\x2f\x73\x68\x68"...

security flaw

Postfix 2.1.3, when /proc/net/ifinet6 is not available and permitmxbackup is enabled in smtpdrecipientrestrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname...

Biz Mail Form 2.x - Unauthorized Mail Relay

source: https://www.securityfocus.com/bid/12620/info Biz Mail Form is prone to a vulnerability that allows the application to be abused as a mail relay. An attacker can exploit this issue to inject arbitrary SMTP headers by using CR and LF sequences. If successful, it becomes possible to abuse th...

Biz Mail Form 2.x - Unauthorized Mail Relay

Biz Mail Form 2.x - Unauthorized Mail Relay source: https://www.securityfocus.com/bid/12620/info Biz Mail Form is prone to a vulnerability that allows the application to be abused as a mail relay. An attacker can exploit this issue to inject arbitrary SMTP headers by using CR and LF sequences. If...

BizMail bizmail.cgi Arbitrary Mail Relay

The remote web server is hosting the CGI bizmail.cgi, a CGI script for sending the content of web forms to email addresses. The remote version of this software fails to sanitize the 'email' parameter to the 'bizmail.cgi' script of CRLF sequences. An unauthenticated, remote attacker may be able to...

CVE-2005-0431

CVE-2005-0431 : Barracuda Spam Firewall 3.1.10 and earlier allows white-listed domains to relay mail to arbitrary destinations, creating an open relay. Root cause: insufficient restriction on destination domains for white-listed senders. Impact: enables spam relaying; CVSS from NVD lists base sco...