RHEL 5 : python (RHSA-2011:0492)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0492 advisory. - expat: buffer over-read and crash on XML with malformed UTF-8 sequences CVE-2009-3720 - Python: SMTP proxy RFC 2821 module DoS uncaught...

CVE-2007-4296

Unspecified vulnerability in assp.pl in Anti-Spam SMTP Proxy Server ASSP 1.3.3 has unknown impact and attack vectors...

CVE-2007-4296

Technical details (affected software/component, root cause, impact or fix) are not publicly provided in the provided documents. Monitor for updates; current sources describe an unspecified vulnerability in assp.pl for Anti-Spam SMTP Proxy Server 1.3.3 with unknown impact.

CVE-2007-4296: Undefined Security Weakness

Unspecified vulnerability in assp.pl in Anti-Spam SMTP Proxy Server ASSP 1.3.3 has unknown impact and attack vectors...

CVE-2007-3253

Multiple unspecified vulnerabilities in Astaro Security Gateway ASG before 7.005 allow remote attackers to cause a denial of service via 1 certain email, which stops the SMTP Proxy during scanning; 2 certain HTTP traffic, which stops or slows down the HTTP proxy during HTTP responses containing...

CVE-2007-3253

The CVE-2007-3253 entry relates to Astaro Security Gateway (ASG) prior to 7.005. The documented issues are three DoS vectors: (1) email path triggering the SMTP Proxy to stop during scanning, (2) HTTP traffic causing the HTTP proxy to stop or slow during responses that include virus-scanned pages...

CVE-2007-3253

Multiple unspecified vulnerabilities in Astaro Security Gateway ASG before 7.005 allow remote attackers to cause a denial of service via 1 certain email, which stops the SMTP Proxy during scanning; 2 certain HTTP traffic, which stops or slows down the HTTP proxy during HTTP responses containing...

CVE-2007-3253: Undefined Security Weakness

Multiple unspecified vulnerabilities in Astaro Security Gateway ASG before 7.005 allow remote attackers to cause a denial of service via 1 certain email, which stops the SMTP Proxy during scanning; 2 certain HTTP traffic, which stops or slows down the HTTP proxy during HTTP responses containing...

Anti-Spam SMTP Proxy Server未授权文件访问漏洞

Anti-Spam SMTP Proxy Server是一款反垃圾邮件SMTP代理服务器。 Anti-Spam SMTP Proxy Server不正确限制用户的访问，远程攻击者可以利用漏洞访问系统上文件获得敏感信息。 John Hanna Anti-Spam SMTP Proxy ASSP Server 1.2.3 http://assp.sourceforge.net/...

CVE-2006-4258

Absolute path traversal vulnerability in the get functionality in Anti-Spam SMTP Proxy ASSP allows remote authenticated users to read arbitrary files via 1 C:\ Windows drive letter, 2 UNC, and possibly other types of paths in the file parameter...

CVE-2006-4258

CVE-2006-4258 affects Anti-Spam SMTP Proxy (ASSP). The vulnerability is an absolute path traversal in the get functionality, allowing remote authenticated users to read arbitrary files via file parameter values such as C:\ or UNC paths. Documents confirm the affected component and the underlying ...

CVE-2006-4258

Absolute path traversal vulnerability in the get functionality in Anti-Spam SMTP Proxy ASSP allows remote authenticated users to read arbitrary files via 1 C:\ Windows drive letter, 2 UNC, and possibly other types of paths in the file parameter...

CVE-2006-4258: Undefined Security Weakness

Absolute path traversal vulnerability in the get functionality in Anti-Spam SMTP Proxy ASSP allows remote authenticated users to read arbitrary files via 1 C:\ Windows drive letter, 2 UNC, and possibly other types of paths in the file parameter...

CVE-2004-2545

CVE-2004-2545 affects Secure Computing Corporation Sidewinder G2 6.1.0.01. Described as a remote denial of service of the SMTP proxy triggered by an “extremely busy network.” The embedded monitoring sub-system reportedly restarts after the failure. No remediation or concrete exploitation details ...

CVE-2004-2545

Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service SMTP proxy failure via unknown attack vendors involving an "extremely busy network." NOTE: this might not be a vulnerability because the embedded monitoring sub-system automatically restarts...

CVE-2004-2545: Undefined Security Weakness

Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service SMTP proxy failure via unknown attack vendors involving an "extremely busy network." NOTE: this might not be a vulnerability because the embedded monitoring sub-system automatically restarts...

CVE-2004-2417

CVE-2004-2417 : A format string vulnerability in smtp.c for smtp.proxy 1.1.3 and earlier allows remote code execution by injecting format string specifiers via the client hostname or message-id into a syslog message. Affected: smtp.proxy before 1.1.3. Impact and remediation details are not provid...

CVE-2004-2545

Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service SMTP proxy failure via unknown attack vendors involving an "extremely busy network." NOTE: this might not be a vulnerability because the embedded monitoring sub-system automatically restarts...

smtp.proxy format string bug

syslog sender address format string bug...

CVE-2002-0309

The CVE-2002-0309 entry describes a vulnerability in Symantec Enterprise Firewall (SEF) 6.5.x where the SMTP proxy leaks the firewall’s physical interface name and address in an SMTP protocol exchange when NAT translates to an address other than the firewall. This could allow remote attackers to ...