CVE-1999-0231

This CVE affects IP-Switch IMail and Seattle Labs Slmail 2.6, caused by a buffer overflow triggered by a long VRFY command. Impact: denial of service and potentially remote access. Remediation: for Seattle Labs Slmail 2.6, disable VRFY until a patch is available; for IP-Switch IMail, no fix/versi...

CVE-1999-0272

Denial of service in Slmail v2.5 through the POP3 port...

CVE-1999-0272

Slmail v2.5 is affected by a denial-of-service issue via the POP3 port. The connected PT-1997-1116 entry recommends upgrading Slmail past 2.5 or restricting POP3 access as a mitigation. The root cause is not detailed in the provided documents; no exploits are described here.

CVE-1999-0102

Buffer overflow in SLmail 3.x allows attackers to execute commands using a large FROM line...

CVE-1999-0102

CVE-1999-0102 describes a buffer overflow in SLmail 3.x that lets attackers execute commands via a large FROM line. Affected component: SLmail 3.x. Root cause: improper handling of oversized From headers leading to memory corruption and command execution. Impact (as documented): partial confident...

slmail-smash.txt

Date: Wed, 8 Jul 1998 17:32:02 PDT From: Ezekial Morrow Subject: SLMail 3.0.2421 Stack Overflow... Product: SLMail 3.0.2421 from Seattle Lab. Vulnerability: Stack overflow - Remote execution of code. Jeremy Kothe [email protected] If the "mail from" field exceeds 256 bytes, it will pass throug...

slmail3.1.txt

Date: Thu, 4 Feb 1999 13:51:32 -0800 From: Marc To: [email protected] Subject: Multiple SLMail Vulnerabilities eEye Digital Security Team www.eEye.com [email protected] February 04, 1999 Multiple SLMail Vulnerabilities Systems Affected SLMail 3.1 Release Date February 04, 1999 Advisory...

slmail.ntfs.txt

By-pass NTFS permissions on machines running SLMail 3.2 Introduction This advisory if for those running SLMail version 3.2 or 3.1 with the Remote Administration Service enabled. Due to certain short comings of this service any user with an account on the NT machine running SLMail can by-pass all...

slmail3.txt

Date: Fri, 4 Sep 1998 16:38:13 +0100 From: Mnemonix Subject: SL-Mail ver 3.0.2423 security Hi, I thought I'd write to advise of a security issue with SLMail version 3.0.3423. Other versions may also be affected. During the install you choose whether the passowrd is set to the account name,...

CVE-1999-0380

SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service RAS is enabled by setting a user's Finger File to point to the target file, then running finger on the user...

CVE-1999-0231

Buffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of service and possibly remote access...

PT-1999-1021 · Seattle +1 · Slmail +1

Name of the Vulnerable Software and Affected Versions: IP-Switch IMail affected versions not specified Seattle Labs Slmail version 2.6 Description: The issue is related to a buffer overflow caused by a long VRFY command, which can lead to a denial of service and potentially allow for remote acces...

CVE-1999-1265

SMTP server in SLmail 3.1 and earlier allows remote attackers to cause a denial of service via malformed commands whose arguments begin with a "" parenthesis character, such as 1 SEND, 2 VRFY, 3 EXPN, 4 MAIL FROM, 5 RCPT TO...

CVE-1999-0102

Buffer overflow in SLmail 3.x allows attackers to execute commands using a large FROM line...

PT-1998-1026 · Slmail · Slmail

Name of the Vulnerable Software and Affected Versions: SLmail versions 3.x Description: A buffer overflow issue in SLmail allows attackers to execute commands by using a large FROM line. Recommendations: For SLmail versions 3.x, update to a version that fixes this issue to prevent command executi...

CVE-1999-0272

Denial of service in Slmail v2.5 through the POP3 port...