CVE-2008-2784

The smtpfilter function in spamdyke before 3.1.8 does not filter RCPT commands after encountering the first DATA command, which allows remote attackers to use the server as an open mail relay by sending RCPT commands with invalid recipients, followed by a DATA command, followed by arbitrary RCPT...

CVE-2008-2784

The smtpfilter function in spamdyke before 3.1.8 does not filter RCPT commands after encountering the first DATA command, which allows remote attackers to use the server as an open mail relay by sending RCPT commands with invalid recipients, followed by a DATA command, followed by arbitrary RCPT...

CVE-2008-2784

The smtpfilter function in spamdyke before 3.1.8 does not filter RCPT commands after encountering the first DATA command, which allows remote attackers to use the server as an open mail relay by sending RCPT commands with invalid recipients, followed by a DATA command, followed by arbitrary RCPT...

CVE-2008-2784

CVE-2008-2784 affects spamdyke prior to 3.1.8. The smtp_filter fails to properly filter RCPT commands after the first DATA command, enabling a remote attacker to use the server as an open relay by issuing RCPT commands with invalid recipients, then a DATA, and continuing with RCPT/DATA sequences....

CVE-2008-2784: Undefined Security Weakness

The smtpfilter function in spamdyke before 3.1.8 does not filter RCPT commands after encountering the first DATA command, which allows remote attackers to use the server as an open mail relay by sending RCPT commands with invalid recipients, followed by a DATA command, followed by arbitrary RCPT...

FreeBSD : spamdyke -- open relay (555ac165-2bee-11dd-bbdc-00e0815b8da8)

Spamdyke Team reports : Fixed smtpfilter to reject the DATA command if no valid recipients have been specified. Otherwise, a specific scenario could result in every spamdyke installation being used as an open relay. If the remote server connects and gives one or more recipients that are rejected...

spamdyke -- open relay

Spamdyke Team reports: Fixed smtpfilter to reject the DATA command if no valid recipients have been specified. Otherwise, a specific scenario could result in every spamdyke installation being used as an open relay. If the remote server connects and gives one or more recipients that are rejected f...

Kent Web PostMail vulnerable to third party mail relay

Overview Kent Web PostMail, form mail software that enables sending email from web pages, contains a vulnerability which may allow the third party to relay mail as it does not properly check input. Impact An attacker could possibly compromise the mail server to send an unsolicited email. Solution...

SQL Injection and Cross-Site Scripting vulnerabilities in Relay

Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых SQL Injection и Cross-Site Scripting уязвимостях в движке Relay. SQL Injection: http://site/relay/management/index.php?page=manage&module=users&action=setEmail&uid=120and20substringversion,1,1=3&email=1 XSS:...

SQL Injection in Relay

Здравствуй Владимир! В дополнение к моему последнему письму о новых уязвимостях в Relay, хочу сообщить тебе о том, что я разработал эксплоит для SQL Injection уязвимости в Relay. С которым ты можешь ознакомиться. Relay Blind SQL Injection Exploit...

Design/Logic Flaw

Acidcat CMS 3.4.1 does not properly restrict access to 1 defaultmailaspemail.asp, 2 defaultmailcdosys.asp or 3 defaultmailjmail.asp, which allows remote attackers to bypass restrictions and relay email messages with modified From, FromName, and To fields...

CVE-2008-1992

Acidcat CMS 3.4.1 does not properly restrict access to 1 defaultmailaspemail.asp, 2 defaultmailcdosys.asp or 3 defaultmailjmail.asp, which allows remote attackers to bypass restrictions and relay email messages with modified From, FromName, and To fields...

CVE-2008-1992

The CVE-2008-1992 entry concerns Acidcat CMS 3.4.1, where access to (1) default_mail_aspemail.asp, (2) default_mail_cdosys.asp, and (3) default_mail_jmail.asp is not properly restricted. This improper access could allow remote attackers to bypass restrictions and relay email messages with modifie...

CVE-2008-1992

Acidcat CMS 3.4.1 does not properly restrict access to 1 defaultmailaspemail.asp, 2 defaultmailcdosys.asp or 3 defaultmailjmail.asp, which allows remote attackers to bypass restrictions and relay email messages with modified From, FromName, and To fields...

CVE-2008-1992: Undefined Security Weakness

Acidcat CMS 3.4.1 does not properly restrict access to 1 defaultmailaspemail.asp, 2 defaultmailcdosys.asp or 3 defaultmailjmail.asp, which allows remote attackers to bypass restrictions and relay email messages with modified From, FromName, and To fields...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Relay: SQL injection and crossite scripting...

New vulnerabilities in Relay

Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых SQL Injection и Cross-Site Scripting уязвимостях в движке Relay. О предыдущих уязвимостях в Relay я писал ранее. SQL Injection: http://site/relay/management/index.php?page=manage&module=users&action=details&uid=-120or20id=1...

Vulnerabilities in Relay

Здравствуйте 3APA3A! Сообщаю вам о найденных мною SQL Injection и Cross-Site Scripting уязвимостях в движке Relay. SQL Injection: http://site/relay/relay.php?relay=getFile&fileid=-120or20id=1151513788 http://site/relay/relay.php?relay=getFile&fileid=115151378820and20substringversion,1,1=3 XSS...

Debian Security Advisory DSA 245-1 (dhcp3)

The remote host is missing an update to dhcp3 announced via advisory DSA 245-1. OpenVAS Vulnerability Test $Id: deb2451.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 245-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 554-1 (sendmail)

The remote host is missing an update to sendmail announced via advisory DSA 554-1. OpenVAS Vulnerability Test $Id: deb5541.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 554-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...