CVE-2010-2580

The SMTP service MESMTPC.exe in MailEnable 3.x and 4.25 does not properly perform a length check, which allows remote attackers to cause a denial of service crash via a long 1 email address in the MAIL FROM command, or 2 domain name in the RCPT TO command, which triggers an "unhandled invalid...

Command injection

The SMTP service MESMTPC.exe in MailEnable 3.x and 4.25 does not properly perform a length check, which allows remote attackers to cause a denial of service crash via a long 1 email address in the MAIL FROM command, or 2 domain name in the RCPT TO command, which triggers an "unhandled invalid...

CVE-2010-2580

MailEnable’s SMTP service MESMTPC.exe (MailEnable 3.x and 4.25) fails length checks for MAIL FROM and RCPT TO, permitting remote attackers to crash the service via overly long addresses/names, triggering an unhandled invalid parameter error. Root cause: insufficient length checks in logging/buffe...

CVE-2010-2580: Improper Input Validation

The SMTP service MESMTPC.exe in MailEnable 3.x and 4.25 does not properly perform a length check, which allows remote attackers to cause a denial of service crash via a long 1 email address in the MAIL FROM command, or 2 domain name in the RCPT TO command, which triggers an "unhandled invalid...

AA SMTP SERVER v.1.1 - Crash POC

Exploit for windows platform in category dos / poc ================================ AA SMTP SERVER v.1.1 - Crash POC ================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' ...

MS10-024: Description of the security update for Windows SMTP Service: April 13, 2010 and July 13, 2010

None None...

Microsoft Windows SMTP Service DNS Response Spoofing (MS10-024; CVE-2010-1690)

Microsoft Windows Simple Mail Transfer Protocol SMTP service is installed as part of Internet Information Services IIS to transfer email messages. SMTP handles how a given e-mail is transported and delivered across the Internet to the destination server. A spoofing vulnerability has been reported...

Microsoft Windows SMTP服务可预测DNS查询ID漏洞（MS10-024）

BUGTRAQ ID: 39908 CVE ID: CVE-2010-1689 Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统中的SMTP服务所生成的DNS查询中transaction ID字段值是可预测的： /----- 4FB5530C 4FB5530C loc4FB5530C: 4FB5530C mov esi+3Ch, eax 4FB5530F mov eax, ebp+arg8 4FB55312 mov ecx, ushort gwTransactionId 4FB55318 inc word ptr ushort...

Microsoft SMTP Service and Exchange Routing Engine Buffer Overflow Vulnerability

The Microsoft Windows 2003 SMTP Service and Exchange Routing Engine have been reported prone to a buffer overflow. This occurs during the processing responses to DNS lookups. Successful exploitation could allow for remote code execution in the context of the vulnerable service. OpenVAS...

Microsoft Exchange and Windows SMTP Service Denial of Service Vulnerability (981832)

This host is missing a critical security update according to Microsoft Bulletin MS10-024. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Security Bulletin MS10-024 - Important Vulnerabilities in Microsoft Exchange and Windows SMTP Service Could Allow Denial of Service (981832)

Microsoft Security Bulletin MS10-024 - Important Vulnerabilities in Microsoft Exchange and Windows SMTP Service Could Allow Denial of Service 981832 Published: April 13, 2010 | Updated: April 15, 2010 Version: 1.2 General Information Executive Summary This security update resolves one publicly...

MS10-024: Microsoft Exchange and Windows SMTP Service DoS (981832)

Binary data 5510.prm...

MS10-024: Vulnerabilities in Microsoft Exchange and Windows SMTP Service Could Allow Denial of Service (981832) (uncredentialed check)

The installed version of Microsoft Exchange / Windows SMTP Service is affected by at least one vulnerability : - Incorrect parsing of DNS Mail Exchanger MX resource records could cause the Windows Simple Mail Transfer Protocol SMTP component to stop responding until the service is restarted...

MS10-024: Vulnerabilities in Microsoft Exchange and Windows SMTP Service Could Allow Denial of Service (981832)

The installed version of Microsoft Exchange / Windows SMTP Service is affected by at least one vulnerability : - Incorrect parsing of DNS Mail Exchanger MX resource records could cause the Windows Simple Mail Transfer Protocol SMTP component to stop responding until the service is restarted...

TABS MailCarrier v2.51 SMTP EHLO Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'TABS...

Cross-Site Scripting and Insufficient Anti-automation vulnerabilities in XAMPP

Hello 3APA3A! I want to warn you about new security vulnerabilities in XAMPP. These are Cross-Site Scripting and Insufficient Anti-automation vulnerabilities. XSS: http://site/xampp/iart.php?text=223E3Cscript3Ealertdocument.cookie3C/script3E Insufficient Anti-automation:...

Novell GroupWise Internet Agent e-mail address buffer overflow

Added: 06/05/2009 CVE: CVE-2009-1636 BID: 35064 OSVDB: 54645 Background Novell GroupWise is an e-mail and collaboration product suite. Problem A buffer overflow vulnerability allows a remote attacker to execute arbitrary commands by sending a message containing a specially crafted e-mail address ...

Novell GroupWise Internet Agent e-mail address buffer overflow

Added: 06/05/2009 CVE: CVE-2009-1636 BID: 35064 OSVDB: 54645 Background Novell GroupWise is an e-mail and collaboration product suite. Problem A buffer overflow vulnerability allows a remote attacker to execute arbitrary commands by sending a message containing a specially crafted e-mail address ...

Novell GroupWise Internet Agent e-mail address buffer overflow

Added: 06/05/2009 CVE: CVE-2009-1636 BID: 35064 OSVDB: 54645 Background Novell GroupWise is an e-mail and collaboration product suite. Problem A buffer overflow vulnerability allows a remote attacker to execute arbitrary commands by sending a message containing a specially crafted e-mail address ...

Citadel SMTP server RCPT TO buffer overflow

Added: 05/12/2008 CVE: CVE-2008-0394 BID: 27376 OSVDB: 40516 Background Citadel is an open-source e-mail and collaboration server. Problem A buffer overflow vulnerability in the makeuserkey function allows remote attackers to execute arbitrary commands by sending a long, specially crafted RCPT TO...