3415 matches found
Debian GNU/Linux Sendmail Default SASL Password
The remote host is running a Sendmail server with a default SASL password of 'sendmail' / 'sendmailpwd'. A spammer may use this account to use the remote server as a spam relay for the internet. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid14832; scriptversion"1.16...
[SECURITY] [DSA 554-1] New sendmail packages fix potential open relay
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 554-1 [email protected] http://www.debian.org/security/ Martin Schulze September 27th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 554-1] New sendmail packages fix potential open relay
-------------------------------------------------------------------------- Debian Security Advisory DSA 554-1 [email protected] http://www.debian.org/security/ Martin Schulze September 27th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 554-1] New sendmail packages fix potential open relay
-------------------------------------------------------------------------- Debian Security Advisory DSA 554-1 [email protected] http://www.debian.org/security/ Martin Schulze September 27th, 2004 http://www.debian.org/security/faq -...
Promiscuous email printing in Canon imageRunner
The Canon iR5000i digital printer and probably other imageRunner models has a somewhat undocumented print-from-email feature. Any text/plain email sent to port 25 on the device will be printed. The MAIL FROM and RCPT TO values are not authenticated or even checked for syntax. There appears to be ...
CVE-2002-1278
CVE-2002-1278 affects Linuxconf’s mailconf module (Linuxconf 1.24 and earlier than 1.28) on Conectiva Linux 6.0–8 (and possibly other distros). The vulnerability stems from generating sendmail.cf in a way that leaves Sendmail configured as an open relay, enabling remote attackers to send spam. Pu...
CVE-2002-1278
The mailconf module in Linuxconf 1.24, and other versions before 1.28, on Conectiva Linux 6.0 through 8, and possibly other distributions, generates the Sendmail configuration file sendmail.cf in a way that configures Sendmail to run as an open mail relay, which allows remote attackers to send Sp...
CVE-2003-0039
The CVE-2003-0039 entry concerns ISC dhcrelay (dhcp-relay) up to version 3.0rc9 (and potentially other builds). A malicious BOOTP packet forwarded to the broadcast MAC ff:ff:ff:ff:ff:ff can cause an infinite loop in the relay, not bounded by hop count, leading to a denial of service against confi...
CVE-2002-1278: Undefined Security Weakness
The mailconf module in Linuxconf 1.24, and other versions before 1.28, on Conectiva Linux 6.0 through 8, and possibly other distributions, generates the Sendmail configuration file sendmail.cf in a way that configures Sendmail to run as an open mail relay, which allows remote attackers to send Sp...
CVE-2003-0039: Undefined Security Weakness
ISC dhcrelay dhcp-relay 3.0rc9 and earlier, and possibly other versions, allows remote attackers to cause a denial of service packet storm via a certain BOOTP packet that is forwarded to a broadcast MAC address, causing an infinite loop that is not restricted by a hop count...
Unreal IRCD OperServ Raw Message Channel Join DoS
Binary data 2154.prm...
Unreal IRCD < 3.2.1 Cloak IP Address Disclosure
Binary data 2153.prm...
MS SMTP NULL Session Mail Relay
Binary data 2040.prm...
SUSE-SA:2003:0012: hypermail
The remote host is missing the patch for the advisory SUSE-SA:2003:0012 hypermail. Hypermail is a tool to convert a Unix mail-box file to a set of cross- referenced HTML documents. During an internal source code review done by Thomas Biege several bugs where found in hypermail and its tools. Thes...
[NT] ignitionServer Server Linking Password Verification Vulnerability
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
CVE-2004-0156
Format string vulnerabilities in the 1 die or 2 logevent functions for ssmtp before 2.50.6 allow remote mail relays to cause a denial of service and possibly execute arbitrary code...
DSA-485 ssmtp - format string
Bulletin has no description...
[SECURITY] [DSA 437-1] New cgiemail packages fix open mail relaying
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 437-1 [email protected] http://www.debian.org/security/ Matt Zimmerman February 11th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 437-1] New cgiemail packages fix open mail relaying
-------------------------------------------------------------------------- Debian Security Advisory DSA 437-1 [email protected] http://www.debian.org/security/ Matt Zimmerman February 11th, 2004 http://www.debian.org/security/faq -...