178 matches found
ISMAIL (All Versions) Remote Buffer Overrun
NGSSoftware Insight Security Research Advisory Name: ISMAIL v 1.25 & v 1.4.3 Remote Buffer Overrun Systems Affected: WinNT, Win2K, XP Severity: High Risk Category: Remote Buffer Overrun Vendor URL: http://instantservers.com/ismail.html Author: Mark Litchfield [email protected] Date: 27th...
CVE-2002-1790
The SMTP service in Microsoft Internet Information Services IIS 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and send spam or spoofed messages via encapsulated SMTP addresses, a similar vulnerability to CVE-1999-0682...
Mail relaying via IIS SMTP service
Unauthorized mail relayin then using speciall address format...
CVE-2002-0055
SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer BDAT request...
CVE-2002-0055: Incorrect Resource Transfer Between Spheres
SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer BDAT request...
CVE-2001-0504: Undefined Security Weakness
Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to gain privileges and conduct activities such as mail relaying...
CVE-2002-0054
SMTP service in 1 Microsoft Windows 2000 and 2 Internet Mail Connector IMC in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials...
CVE-2002-0055
SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer BDAT request...
Microsoft Windows SMTP Service Malformed BDAT Request Remote DoS
It is possible to make the remote SMTP server fail and restart by sending specially crafted 'BDAT' requests. The service will restart automatically, but all the connections established at the time of the attack will be dropped. An attacker may use this flaw to make mail delivery to your site less...
Security Bulletin MS02-011
---------------------------------------------------------------------- Title: Authentication Flaw Could Allow Unauthorized Users To Authenticate To SMTP Service Date: 27 February 2002 Software: Microsoft Windows 2000; Microsoft Exchange Server 5.5 Impact: Mail Relaying Max Risk: Low Bulletin:...
Security Bulletin MS02-012
---------------------------------------------------------------------- Title: Malformed Data Transfer Request can Cause Windows SMTP Service to Fail Date: 27 February 2002 Software: Microsoft Windows 2000; Microsoft Windows XP Professional Microsoft Exchange 2000 Impact: Denial of Service Max...
CVE-2000-1047
Buffer overflow in SMTP service of Lotus Domino 5.0.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long ENVID keyword in the "MAIL FROM" command...
CVE-2000-1047
The CVE-2000-1047 issue affects Lotus Domino’s SMTP service (versions 5.0.4 and earlier). The root cause is improper validation of the ENVID parameter in a MAIL FROM command, allowing a remote, unauthenticated attacker to trigger a buffer overflow. Consequences documented in the Nessus plugin inc...
CVE-2000-1047: Undefined Security Weakness
Buffer overflow in SMTP service of Lotus Domino 5.0.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long ENVID keyword in the "MAIL FROM" command...
CVE-1999-1511
Buffer overflows in Xtramail 1.11 allow attackers to cause a denial of service crash and possibly execute arbitrary commands via 1 a long PASS command in the POP3 service, 2 a long HELO command in the SMTP service, or 3 a long user name in the Control Service...
CVE-1999-1511: Undefined Security Weakness
Buffer overflows in Xtramail 1.11 allow attackers to cause a denial of service crash and possibly execute arbitrary commands via 1 a long PASS command in the POP3 service, 2 a long HELO command in the SMTP service, or 3 a long user name in the Control Service...
Microsoft Windows 2000 SMTP service fails to properly authenticate credentials of unauthorized user (MS01-037)
Overview A vulnerability exists in the SMTP service installed by default on Microsoft Windows 2000 Server and optionally on Windows 2000 professional that could allow an intruder to use the service to send mail. Description The Simple Mail Transfer Protocol SMTP is the standard protocol used to...
CVE-2001-0504
Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to gain privileges and conduct activities such as mail relaying...
Security Bulletin MS01-037
---------------------------------------------------------------------- Title: Authentication Error in SMTP Service Could Allow Mail Relaying Date: 05 July, 2001 Software: Windows 2000 Impact: Mail Relaying Bulletin: MS01-037 Microsoft encourages customers to review the Security Bulletin at:...