Service Detection: 3 ASCII Digit Code Responses

This plugin is a complement of findservice1.nasl. It attempts to identify services that return 3 ASCII digits codes ie: FTP, SMTP, NNTP, ... C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid14773; scriptversion"1.60"; scriptsetattributeattribute:"pluginmodificationdate"...

CVE-2004-0309

Stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm before 4.5.538.001, ZoneLabs Integrity client 4.0 before 4.0.146.046, and 4.5 before 4.5.085, allows remote attackers to execute arbitrary code via a long RCPT TO argument...

CVE-2004-0309: Undefined Security Weakness

Stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm before 4.5.538.001, ZoneLabs Integrity client 4.0 before 4.0.146.046, and 4.5 before 4.5.085, allows remote attackers to execute arbitrary code via a long RCPT TO argument...

CVE-2003-1106

The SMTP service in Microsoft Windows 2000 before SP4 allows remote attackers to cause a denial of service crash or hang via an e-mail message with a malformed time stamp in the FILETIME attribute...

CVE-2003-0714

The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service memory exhaustion by directly connecting to the SMTP service and sending a certain extended verb request, possibly triggering a buffer overflow in Exchange 2000...

MS03-046 Microsoft Exchange 2000 Heap Overflow

On October 15th, Microsoft released an advisory stating that both Exchange 5.5 and Exchange 2000 were vulnerable to a denial of service attack in the code which processes extended verb requests. This advisory also stated that Exchange 2000 was vulnerable to a buffer overrun that would allow a...

Microsoft Exchange Server 2000 - XEXCH50 Heap Overflow (PoC) (MS03-046)

!/usr/bin/perl -w ms03-046.pl - hdm metasploit com This vulnerability allows a remote unauthenticated user to overwrite big chunks of the heap used by the inetinfo.exe process. Reliably exploiting this bug is non-trivial; even though the entire buffer is binary safe even nulls and can be just abo...

MS Exchange 2000 XEXCH50 Heap Overflow PoC (MS03-046)

No description provided by source. !/usr/bin/perl -w ms03-046.pl - hdm metasploit com This vulnerability allows a remote unauthenticated user to overwrite big chunks of the heap used by the inetinfo.exe process. Reliably exploiting this bug is non-trivial; even though the entire buffer is binary...

CVE-2003-0714

CVE-2003-0714 affects Microsoft Exchange Server’s Internet Mail Service in Exchange Server 5.5 and Exchange 2000. The issue enables remote attackers to cause a denial of service via memory exhaustion by connecting to SMTP and issuing a specific extended verb request, with a potential buffer overf...

CVE-2003-0714: Uncontrolled Resource Consumption

The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service memory exhaustion by directly connecting to the SMTP service and sending a certain extended verb request, possibly triggering a buffer overflow in Exchange 2000...

Microsoft Windows 2000 SMTP service vulnerable to DoS when processing message with corrupted time stamp

Overview Some versions of Microsoft Windows 2000 feature an SMTP service for handling Internet email. A flaw in this SMTP service may result in a denial-of-service vulnerability. Description When a message with a corrupted time stamp is received by a vulnerable system, the SMTP service may stop...

[Full-Disclosure] extremail (latest) fmt strings

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote Vulnerabilities in eXtremail Server. =========================================== Date: 02.07.2003 Email: B-r00t [email protected] Reference: http://www.extremail.com/ Versions: Linux eXtremail-1.5-8 = VULNERABLE Linux eXtremail-1.5-5 =...

CVE-2003-0280

Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long 1 MAIL FROM or 2 RCPT TO commands...

CVE-2003-0280

Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long 1 MAIL FROM or 2 RCPT TO commands...

CVE-2003-0280: Undefined Security Weakness

Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long 1 MAIL FROM or 2 RCPT TO commands...

CVE-2002-1415

Format string vulnerability in SMTP service for WebEasyMail 3.4.2.2 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format strings in SMTP requests...

EUVD-2002-0054

SMTP service in 1 Microsoft Windows 2000 and 2 Internet Mail Connector IMC in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials...

CVE-2002-1415

Format string vulnerability in SMTP service for WebEasyMail 3.4.2.2 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format strings in SMTP requests...

CVE-2002-1415: Undefined Security Weakness

Format string vulnerability in SMTP service for WebEasyMail 3.4.2.2 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format strings in SMTP requests...

Microsoft Windows SMTP Service NTLM Null Session Authorization Bypass (uncredentialed check)

It is possible to authenticate to the remote SMTP service by logging in with a NULL session. An attacker may use this flaw to use your SMTP server as a spam relay. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11308; scriptversion"1.29"; scriptcvsdate"Date: 2018/11/...