CVE-2017-14461

A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensitive information disclosure and denial of service. In order to trigger this vulnerability, an attacker needs to send a specially crafted email message to the...

Buffer overflow

In Azure Data Expert Ultimate 2.2.16, the SMTP verification function suffers from a buffer overflow vulnerability, leading to remote code execution. The attack vector is a crafted SMTP daemon that sends a long 220 aka "Service ready" string...

CVE-2011-1720

The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails, which allows remote attackers to cause a denial of service...

A-V Tronics InetServ SMTP Denial of Service Vulnerability

InetServ is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-5006

smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service NULL pointer dereference and application crash by responding to the QUIT command with a close of the TCP connection instead of the expected 221 response code...

QK SMTP远程栈溢出漏洞

QK SMTP Server是一款SMTP（简单邮件传输协议）服务器软件。 QK SMTP Server在处理用户命令参数时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 QK SMTP Server在处理传送给“RCPT TO:”命令的参数时存在栈溢出漏洞，远程攻击者可以通过向服务器发送超长参数导致执行任意指令。 QKSoft QK SMTP 3.1.0 Beta QKSoft QK SMTP 3.0.1 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.qksoft.com/ /...

QK SMTP 3.01 - 'RCPT TO' Remote Buffer Overflow (1)

/ . \ \ \ \ | | / | | | | \ / / /\ \ / \ | \ / / / / 25\10\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through "MbdMP Going forward may not be the answer .dMMMMMM.P dMM MMMMMM maybe I should go back...

Qwik SMTP 0.3 - Format String

/ qwik-smtp Remote Root Exploit ------------------------------- Bug found by: Dark Eagle Exploit coded by: Carlos Barros Home Page: http://www.barrossecurity.com Exploitation techinique: This bug is a simple format string bug. While coding this exploit, I found just two "problems". The first is...

MailCarrier 2.51 SMTP EHLO / HELO Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================= MailCarrier 2.51 SMTP EHLO / HELO Buffer Overflow Exploit ========================================================= MailCarrier 2.51 SMTP EHLO / HELO Buffer Overflow Advanced, secure...

TABS MailCarrier 2.51 - SMTP 'EHLO' / 'HELO' Remote Buffer Overflow

MailCarrier 2.51 SMTP EHLO / HELO Buffer Overflow Advanced, secure and easy to use FTP Server. 23 Oct 2004 - muts D:\BOmailcarrier-2.5-EHLO.py D:\data\toolsnc -v 192.168.1.32 101 localhost 127.0.0.1 101 hostname open Microsoft Windows 2000 Version 5.00.2195 C Copyright 1985-2000 Microsoft Corp...

YahooPOPs <= 1.6 SMTP Remote Buffer Overflow Exploit

No description provided by source. //Diabolic Crab's exploit for YahooPOPs = 1.6 SMTP //[email protected] //www.hackerscenter.com //For more work check out, http://icis.digitalparadox.org //This was done at 4 am so escuse the messy code if any //Good job class101 on the windows version ;...

TFS SMTP < 4.0 Build 210 MAIL FROM Remote Overflow

Binary data 2034.prm...

Microsoft Exchange Server fails to properly handle specially crafted SMTP extended verb requests

Overview Microsoft Exchange fails to handle certain SMTP extended verbs correctly. In Exchange 5.5, this can lead to a denial-of-service condition. In Exchange 2000, this could permit an attacker to run arbitrary code. Description Microsoft Exchange is a popular collaboration product which includ...

FTGatePro Mail Server Multiple Command Remote Overflow

The remote SMTP server is running FT Gate Pro. There is a remote stack-based buffer overflow vulnerability in this version. This issue can be exploited by supplying a very long argument to the 'MAIL FROM' and 'RCPT TO' SMTP commands. A remote attacker could use this to crash the SMTP server, or...

FloosieTek FTGate PRO 1.22 - SMTP MAIL FROM Buffer Overflow

source: https://www.securityfocus.com/bid/7506/info A buffer overflow vulnerability has been reported for Floosietek FTGate PRO mail server. The vulnerability exists when the mail server attempts to process overly long SMTP 'Mail From' arguments. Due to the nature of this vulnerability it may be...

FloosieTek FTGate PRO 1.22 - SMTP RCPT TO Buffer Overflow

source: https://www.securityfocus.com/bid/7508/info A buffer overflow vulnerability has been reported for Floosietek FTGate PRO mail server. The vulnerability exists when the mail server attempts to process overly long SMTP 'Rcpt To' arguments. Due to the nature of this vulnerability it may be...

CVE-2002-0054

CVE-2002-0054 affects the SMTP service in Windows 2000 and the Internet Mail Connector (IMC) in Exchange Server 5.5. The issue stems from improper handling of NTLM authentication responses, enabling remote attackers to relay mail via SMTP AUTH using a null session. Public references describe this...

EType EServ 2.9x - SMTP Remote Denial of Service

source: https://www.securityfocus.com/bid/6521/info EServ is a proxy software package distributed by EType. It is available for Microsoft Windows operating systems. It has been reported that a problem in EServ may cause the software to crash. When a remote user sends a large amount of data via...

CVE-2002-2080

Floositek FTGate PRO 1.05 allows remote attackers to cause a denial of service memory and CPU consumption via a large number of RCPT TO: messages during an SMTP session...

SmartMail server DOS

hi SmartMail Server http://www.virtualzone.de/smartmail/is a full featured E-Mail Server. It can be run on any 32Bit compatible Microsoft Windows machine and complies with the standards of SMTP, POP3 and HTTP Webinterface. SmartMail proposes two version of SmartMail server, I found that two...