mailenable-dos.txt

!/usr/bin/python MailEnable SMTP Service VRFY/EXPN Command Buffer Overflow DoS Bug discovered by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Affected Versions : Standard Edition all versions Professional Edition all versions Enterprise Edition all versions Tested on...

MailEnable 3.13 SMTP Service - VRFYEXPN Denial of Service

MailEnable 3.13 SMTP Service - VRFYEXPN Denial of Service !/usr/bin/python MailEnable SMTP Service VRFY/EXPN Command Buffer Overflow DoS Bug discovered by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Affected Versions : Standard Edition all versions Professional...

MailEnable 3.13 SMTP Service - 'VRFY/EXPN' Denial of Service

!/usr/bin/python MailEnable SMTP Service VRFY/EXPN Command Buffer Overflow DoS Bug discovered by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Affected Versions : Standard Edition all versions Professional Edition all versions Enterprise Edition all versions Tested on...

CVE-2008-1275

Multiple unspecified vulnerabilities in the SMTP service in MailEnable Standard Edition 1.x, Professional Edition 3.x and earlier, and Enterprise Edition 3.x and earlier allow remote attackers to cause a denial of service crash via crafted 1 EXPN or 2 VRFY commands...

CVE-2008-1275: Undefined Security Weakness

Multiple unspecified vulnerabilities in the SMTP service in MailEnable Standard Edition 1.x, Professional Edition 3.x and earlier, and Enterprise Edition 3.x and earlier allow remote attackers to cause a denial of service crash via crafted 1 EXPN or 2 VRFY commands...

Mercury Mail SMTP AUTH CRAM-MD5 buffer overflow

Added: 10/05/2007 CVE: CVE-2007-4440 BID: 25357 OSVDB: 39669 Background Mercury Mail Transport System is an e-mail server product for Windows and NetWare. Problem A buffer overflow vulnerability in the SMTP service allows remote attackers to execute arbitrary commands by sending a specially craft...

Symantec Mail Security for SMTP libdayzero.dll Executable Parsing DoS

Symantec Mail Security for SMTP, which provides antispam and antivirus protection for the IIS SMTP Service, is installed on the remote Windows host. The version of Symantec Mail Security for SMTP installed on the remote host contains boundary errors in its detection of executable packers in...

CVE-2007-3203

Stack-based buffer overflow in smtpdll.dll in the SMTP service in 602Pro LAN SUITE 2003 2003.0.03.0828 allows remote attackers to execute arbitrary code via an e-mail message with a long address. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Stack overflow

Stack-based buffer overflow in smtpdll.dll in the SMTP service in 602Pro LAN SUITE 2003 2003.0.03.0828 allows remote attackers to execute arbitrary code via an e-mail message with a long address. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-3203

CVE-2007-3203 : A stack-based buffer overflow in smtpdll.dll of the SMTP service in 602Pro LAN SUITE 2003 (version 2003.0.03.0828) allows remote attackers to execute arbitrary code via an e-mail message containing a long address. This is a confirmed vulnerability with CVSS v2 base score 7.5 (Netw...

CVE-2007-3203: Undefined Security Weakness

Stack-based buffer overflow in smtpdll.dll in the SMTP service in 602Pro LAN SUITE 2003 2003.0.03.0828 allows remote attackers to execute arbitrary code via an e-mail message with a long address. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

MS02-012: Malformed Data Transfer Request can Cause Windows SMTP Service to Fail (313450)

The remote host contains a flaw in its SMTP service that could allow an attacker to crash it. Vulnerable services are SMTP service Windows XP/Windows 2000 and Exchange 2000 Windows 2000. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid20885; scriptversion"1.29";...

CVE-2006-7038

Multiple buffer overflows in MERCUR Messaging 2005 before Service Pack 4 allow remote attackers to cause a denial of service crash via 1 "long command lines at port 32000" and 2 certain name service queries that are not properly handled by the SMTP service...

CVE-2006-7041

The SMTP service in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service infinite loop via a message in which neither the originator nor recipient address is known...

CVE-2006-7041

The CVE-2006-7041 entry concerns MERCUR Messaging 2005 before Service Pack 4, where the SMTP service is vulnerable to a denial-of-service (infinite loop) triggered by a message with neither originator nor recipient address known. Public sources (NVD/NIST) describe this as a remote DoS with CVSSv2...

CVE-2006-7038

Multiple buffer overflows in MERCUR Messaging 2005 before Service Pack 4 allow remote attackers to cause a denial of service crash via 1 "long command lines at port 32000" and 2 certain name service queries that are not properly handled by the SMTP service...

CVE-2006-7041: Undefined Security Weakness

The SMTP service in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service infinite loop via a message in which neither the originator nor recipient address is known...

CVE-2006-7038: Undefined Security Weakness

Multiple buffer overflows in MERCUR Messaging 2005 before Service Pack 4 allow remote attackers to cause a denial of service crash via 1 "long command lines at port 32000" and 2 certain name service queries that are not properly handled by the SMTP service...

Ipswitch IMail Server SMTP Service Crafted RCPT String Remote Overflow

The remote host is running Ipswitch Collaboration Suite / IMail Secure Server / IMail Server, commercial messaging and collaboration suites for Windows. According to its banner, the version of Ipswitch Collaboration Suite / IMail Secure Server / IMail Server installed on the remote host has a...

CVE-2006-4616: Undefined Security Weakness

SMTP service in MailEnable Standard, Professional, and Enterprise before ME-10014 20060904 allows remote attackers to cause a denial of service via an SPF lookup for a domain with a large number of records, which triggers a null pointer exception...