89 matches found
Nmap NSE net: smtp-open-relay
Attempts to relay mail by issuing a predefined combination of SMTP commands. The goal of this script is to tell if a SMTP server is vulnerable to mail relaying. An SMTP server that works as an open relay, is a email server that does not verify if the user is authorised to send email from the...
Nmap NSE net: smtp-commands
This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 4 / 5 : postfix (RHSA-2011:0422)
The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0422 advisory. - postfix improper mailbox permissions CVE-2008-2937 - postfix: SMTP commands injection during plaintext to TLS session switch...
CVE-2010-4344
Heap-based buffer overflow in the stringvformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing crafted headers, leading to improper rejection logging...
ClamAV Mail Filter Extension Crafted Recipient Command Execution (CVE-2007-4560)
ClamAV AntiVirus is an open source product that provides anti-virus scanning utilities and an anti-virus library. ClamAV includes a milter mail filter for the mail transfer agents MTA such as Sendmail. A milter is a mail filter extension used for MTAs that allows third-party programs to access ma...
Design/Logic Flaw
Pablo Software Solutions Quick 'n Easy Mail Server 3.3 allows remote attackers to cause a denial of service daemon outage or CPU consumption via multiple long SMTP commands, as demonstrated by HELO commands...
CVE-2009-1602
Pablo Software Solutions Quick 'n Easy Mail Server 3.3 allows remote attackers to cause a denial of service daemon outage or CPU consumption via multiple long SMTP commands, as demonstrated by HELO commands...
CVE-2009-1602: Improper Restriction of Operations within the Bounds of a Memory Buffer
Pablo Software Solutions Quick 'n Easy Mail Server 3.3 allows remote attackers to cause a denial of service daemon outage or CPU consumption via multiple long SMTP commands, as demonstrated by HELO commands...
CVE-2008-3335
Unspecified vulnerability in PunBB before 1.2.19 allows remote attackers to inject arbitrary SMTP commands via unknown vectors...
CVE-2008-3335
PunBB prior to version 1.2.19 contains an unspecified vulnerability that allows remote attackers to inject arbitrary SMTP commands via unknown vectors. The issue is rated high severity (CVSSv2 base score 10.0) with network attack requirements and full impact on confidentiality, integrity, and ava...
CVE-2007-3803
The SMTP ALG in Clavister CorePlus before 8.80.04, and 8.81.00, does not properly parse SMTP commands in certain circumstances, which allows remote attackers to bypass address blacklists...
CVE-2007-3791
Buffer overflow in the wread function in sockets.c in Cami Sardinha and Nigel Kukard policyd before 1.81 for Postfix allows remote attackers to cause a denial of service and possibly execute arbitrary code via long SMTP commands. NOTE: some of these details are obtained from third party informati...
Buffer overflow
Buffer overflow in the wread function in sockets.c in Cami Sardinha and Nigel Kukard policyd before 1.81 for Postfix allows remote attackers to cause a denial of service and possibly execute arbitrary code via long SMTP commands. NOTE: some of these details are obtained from third party informati...
CVE-2007-3791
Buffer overflow in the wread function in sockets.c in Cami Sardinha and Nigel Kukard policyd before 1.81 for Postfix allows remote attackers to cause a denial of service and possibly execute arbitrary code via long SMTP commands. NOTE: some of these details are obtained from third party informati...
CVE-2007-3791
Buffer overflow in the wread function in sockets.c in Cami Sardinha and Nigel Kukard policyd before 1.81 for Postfix allows remote attackers to cause a denial of service and possibly execute arbitrary code via long SMTP commands. NOTE: some of these details are obtained from third party informati...
CVE-2007-3791
CVE-2007-3791 affects postfix-policyd (the anti-spam policy daemon for Postfix). The connected sources confirm a buffer overflow in the w_read function in sockets.c, allowing remote attackers to trigger a denial of service and potentially execute arbitrary code via long SMTP commands. The issue i...
CVE-2006-5313
Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary SMTP commands by placing them after a CRLF.CRLF sequence in the smtpmessage parameter. NOTE: this crosses privilege boundaries if the SMTP server configuration prevents a user from establishing a direct...
CVE-2006-5313
Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary SMTP commands by placing them after a CRLF.CRLF sequence in the smtpmessage parameter. NOTE: this crosses privilege boundaries if the SMTP server configuration prevents a user from establishing a direct...
CVE-2006-5313: Improper Input Validation
Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary SMTP commands by placing them after a CRLF.CRLF sequence in the smtpmessage parameter. NOTE: this crosses privilege boundaries if the SMTP server configuration prevents a user from establishing a direct...
