[SAFER] Buffer overflow in Lotus Domino SMTP Server

S.A.F.E.R. Security Bulletin 001103.EXP.1.9 TITLE : Buffer overflow in Lotus Domino SMTP Server DATE : November 03, 2000 NATURE : Remote execution of code, Denial-of-Service AFFECTED : Lotus Notes/Domino 5 up to and including 5.04 PROBLEM: Buffer overflow exists in Lotus Domino SMTP server, which...

Nevis Systems All-Mail 1.1 - Remote Buffer Overflow

Nevis Systems All-Mail 1.1 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/1789/info All-mail is an smtp server for Windows NT and 2000 platforms offered by Nevis Systems. It is vulnerable to remotely exploitable buffer overflow attacks that may lead to an attacker gaining...

Nevis Systems All-Mail 1.1 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/1789/info All-mail is an smtp server for Windows NT and 2000 platforms offered by Nevis Systems. It is vulnerable to remotely exploitable buffer overflow attacks that may lead to an attacker gaining control of the victim host. The condition is known to...

ITHouse Mail Server v1.04 To: Field Handling Overflow

The remote SMTP server is ITHouse Mail Server. Versions 1.04 or earlier of this server are vulnerable to a buffer overrun which happens during the delivery routine of the mails if an attacker has sent a message with a too long 'To:' field. An attacker may use this flaw to execute arbitrary code o...

NetWin DSMTP (Dmail) ETRN Command Overflow

The remote SMTP server is vulnerable to a buffer overflow when the ETRN command is issued arguments which are too long. A remote attacker could exploit this to crash the SMTP server, or possibly execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; if description...

Imate SMTP Server HELO Command Remote Overflow DoS

The remote SMTP server crashes when it is issued a HELO command with an argument longer than 1200 chars. This problem may allow an attacker to shut down your SMTP server. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10435; scriptversion "1.28";...

Infinite loop in LOTUS NOTE 5.0.3. SMTP SERVER

Maybe this is a configuration error in the server where I tryed this but anyway here is the message that I sent : helo xpto.pt mail from: non-existant-user@ipadressoflotusserver mail to : non-existant-user data testing123 . So Lotus Notes SMTP Server now will loop forever trying to tell to the...

Nosque Workshop MsgCore 1.9 - Denial of Service

source: https://www.securityfocus.com/bid/930/info There is a denial of service condition in Nosque Workshop's MsgCore SMTP server. The problem lies in memory used to store server input not being deallocated and eventually exhausted, causing the target NT host to freeze requiring a reboot. If a...

CSM Mail Server MTA 'HELO' DoS

The remote SMTP server is vulnerable to a buffer overflow attack. This issue is triggered by issuing the 'HELO' command followed by a long argument. A remote attacker could exploit this to crash the server, or possibly execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; ...

pakmail.txt

Vulnerable Program: PakMail v1.25 SMTP/POP3 Server Platform : Windows95, 98, NT Vendor : SilverSoft Corporation www.pak.net Impact : Remote/local users can DoS both STMP & POP3 servers Found by : slackee [email protected] Date : 5th December '99 PakMail SMTP/POP3 Server Pakmail V1.25, a sta...

MDaemon Connection Saturation Remote DoS

It was possible to crash the remote version of MDaemon by establishing a large number of connections to it. A remote attacker can exploit this to cause a denial of service. Note that due to the nature of this vulnerability, Nessus cannot be 100% positive on the effectiveness of this check. As a...

cmail-2.4.txt

CMail SMTP Server Version 2.4: Remotely exploitable buffer overflow CMail SMTP Server Version 2.4 Problem: We found a buffer overflow in the CMail SMTP service long MAIL FROM: that may allow an attacker to execute arbitrary code on the target server, it is based on the eEye pointed out overflows ...

SMTP Server Detection

The remote host is running a mail SMTP server on this port. Since SMTP servers are the targets of spammers, it is recommended you disable it if you do not use it. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10263; scriptversion "1.57";...

CVE-1999-0404

CVE-1999-0404 refers to a buffer overflow in the Mail-Max SMTP server for Windows. Multiple connected sources confirm the vulnerability affects Mail-Max, with the root cause being a buffer overflow in the server that can lead to remote command execution. Nessus notes additional remote overflow va...

CVE-1999-0404

Buffer overflow in the Mail-Max SMTP server for Windows systems allows remote command execution...

CVE-1999-0404: Undefined Security Weakness

Buffer overflow in the Mail-Max SMTP server for Windows systems allows remote command execution...

mail_bof.txt

Subject: Many kind of POP3/SMTP server softwares for Windows have buffer overflow bug To: [email protected] Many kind of POP3/SMTP server softwares for Windows have buffer overflow bug by The Shadow Penguin Securuty http://shadowpenguin.backsection.net 1. Introduction I confirmed many kin...

Sendmail RCPT TO Command Arbitrary File Overwrite

The remote SMTP server did not complain when issued the command : MAIL FROM: root@thishost RCPT TO: /tmp/nessustest This probably means that it is possible to send mail directly to files, which is a serious threat, since this allows anyone to overwrite any file on the remote server. This security...

Sendmail Redirection Relaying Allowed

The remote sendmail server accepts messages addressed to recipients of the form 'user@[email protected]'. A remote attacker could leverage this to reach mail servers behind a firewall or to avoid detection by routing mail through the affected host. C Tenable Network Security, Inc...

Sendmail mail from/rcpt to Pipe Arbitrary Command Execution

The remote SMTP server did not complain when issued the command : MAIL FROM: root@thishost RCPT TO: |testing This probably means that it is possible to send mail directly to programs, which is a serious threat, since this allows anyone to execute arbitrary commands on this host. This security hol...