CVE-2006-4616

The CVE-2006-4616 issue affects the MailEnable SMTP service (Standard/Professional/Enterprise), where SPF lookups for domains with large records can trigger a NULL pointer exception in the SMTP service, allowing unauthenticated remote attackers to cause a denial of service. Affected products are ...

CVE-2006-3277

Summary: CVE-2006-3277 affects MailEnable's SMTP service (Standard 1.92 and earlier; Professional 2.0 and earlier; Enterprise 2.0 and earlier) prior to the MESMTPC hotfix. A remote attacker can trigger a denial-of-service (application crash) by sending a HELO command containing a null byte, poten...

CVE-2006-3277: Undefined Security Weakness

The SMTP service of MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and Enterprise 2.0 and earlier before the MESMTPC hotfix, allows remote attackers to cause a denial of service application crash via a HELO command with a null byte in the argument, possibly triggering a lengt...

EUVD-2005-2931

Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite ICS before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the 1 EXPN, 2 MAIL, 3 MAIL FROM, and 4 RCPT TO commands...

CVE-2005-2931: Undefined Security Weakness

Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite ICS before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the 1 EXPN, 2 MAIL, 3 MAIL FROM, and 4 RCPT TO commands...

CVE-2004-2583

The CVE-2004-2583 entry describes a denial-of-service condition in SmarterTools SmarterMail (versions 1.6.1511 and 1.6.1529) where remote attackers can cause high CPU usage by opening a large number of simultaneous connections to TCP port 25. The available sources confirm the affected product and...

CVE-2004-2583: Undefined Security Weakness

SMTP service in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service CPU consumption via a large number of simultaneous open connections to TCP port 25...

CVE-2005-2223

Unknown vulnerability in the SMTP service in MailEnable Standard before 1.9 and Professional before 1.6 allows remote attackers to cause a denial of service crash during authentication...

CVE-2002-1790: Undefined Security Weakness

The SMTP service in Microsoft Internet Information Services IIS 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and send spam or spoofed messages via encapsulated SMTP addresses, a similar vulnerability to CVE-1999-0682...

CVE-2003-1106

The SMTP service in Microsoft Windows 2000 before SP4 allows remote attackers to cause a denial of service crash or hang via an e-mail message with a malformed time stamp in the FILETIME attribute...

CVE-2003-1106: Undefined Security Weakness

The SMTP service in Microsoft Windows 2000 before SP4 allows remote attackers to cause a denial of service crash or hang via an e-mail message with a malformed time stamp in the FILETIME attribute...

CVE-2004-2503

INweb Mail Server 2.40 allows remote attackers to cause a denial of service crash via a large number of connect/disconnect actions to the 1 POP3 and 2 SMTP services...

CVE-2004-2583

SMTP service in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service CPU consumption via a large number of simultaneous open connections to TCP port 25...

CVE-2004-2495

The 1 Webmail, 2 admin, and 3 SMTP services in Ability Mail Server 1.18 allow remote attackers to cause a denial of service CPU consumption via a large number of simultaneous connections to the service...

MailCarrier < 3.0.1 SMTP EHLO Command Remote Overflow

The target is running at least one instance of MailCarrier in which the SMTP service suffers from a buffer overflow vulnerability. By sending an overly long EHLO command, a remote attacker can crash the SMTP service and execute arbitrary code on the target. This script was written by George A...

BaSoMail Server 1.24 POP3/SMTP Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc =============================================================== BaSoMail Server 1.24 POP3/SMTP Remote Denial of Service Exploit =============================================================== !/usr/bin/perl BaSoMail Server POP3 and SMTP v1.24 D.o...

Microsoft Windows SMTP component vulnerable to remote code execution

Overview A vulnerability in the mail handling service in some versions of Microsoft Windows could allow a remote attacker to compromise the affected system. Description The Simple Mail Transfer Protocol SMTP is the most common protocol for the delivery of electronic mail between systems on the...

Windows SMTP service buffer overflow

Buffer overflows during preconfigured DNS server reply analisys...

yahooPOPS.txt

Hat-Squad Advisory: Remote Buffer overflow Vulnerability in YahooPOPS September 22, 2004 Product: YahooPOPS! Vendor URL: http://yahoopops.sourceforge.net Version: YahooPOPS v0.4 up to v0.6 Vulnerability: Remote Buffer overflows Release Date: 27 September 2004 Vendor Status: Informed on 24 Septemb...

Canon ImageRUNNER SMTP Arbitrary Content Printing

The remote host seems to be a Canon ImageRUNNER printer, which runs a SMTP service. It is possible to send an email to the SMTP service and have it printed out. An attacker may use this flaw to send an endless stream of emails to the remote device and cause a denial of service by using all of the...