Microsoft Windows SMTP Service fails to properly handle responses from the NTLM authentication layer

Overview A flaw in the authentication code of the SMTP service provided with Windows 2000 server and Exchange 5.5 may allow a user access to the SMTP service. This acess could be used to relay mail in violation of the SMTP server's security policy, or consume CPU resources on the SMTP server...

Advisory: DoS in WebEasyMail +more possible?

Author: Stan Bubrouski Date: August 19, 2002 Product: WebEasyMail Versions Affected: 3.4.2.2 Latest + previous Severity: Denial of Service on SMTP and POP3 portions of the software. It has not been investigated but there might be a possibility of exploitation to execute code remotely. Problem 1:...

Security Bulletin MS02-037: Server Response To SMTP Client EHLO Command Results In Buffer Overrun (Q326322)

---------------------------------------------------------------------- Title: Server Response To SMTP Client EHLO Command Results In Buffer Overrun Q326322 Date: 24 July 2002 Software: Microsoft Exchange 5.5 Impact: Ability to run arbitrary code Max Risk: Medium Bulletin: MS02-037 Microsoft...

Portcullis Security Advisory - IIS Microsoft SMTP Service Encapsu lated SMTP Address Vulnerability

Portcullis Security Advisory IIS Microsoft SMTP Service Encapsulated SMTP Address Vulnerability Update to Microsoft Security Bulletin MS99-027: NT Exchange Server Encapsulated SMTP Address Vulnerability. Vulnerability discovery and development: Thomas Liam Romanis Security Testing Services Manage...

Microsoft IIS 4.0/5.0 - SMTP Service Encapsulated SMTP Address (MS99-027)

source: https://www.securityfocus.com/bid/5213/info Microsoft Exchange 5.5 and the SMTP Simple Mail Transfer Protocol service included with IIS Internet Information Services 4.0 and 5.0 are vulnerable to an encapsulated SMTP address vulnerability. The vulnerability was originally announced in...

CVE-2001-0504

The CVE-2001-0504 entry affects the SMTP service in Microsoft Windows 2000. A flaw in the authentication handling could allow an intruder to bypass credentials, enabling the attacker to send mail and, in effect, relay through the vulnerable server. The underlying issue is a weakness in how the SM...

IIS SMTP component allows mail relaying via Null Session

BindView Security Advisory -------- IIS SMTP component allows mail relaying via Null Session Issue Date: March 1, 2002 Contact: [email protected] Topic: The SMTP component that comes with IIS can be used by anyone for relaying email. Overview: IIS comes with a small SMTP component. The...

CVE-2000-0932

MAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs, which allows remote attackers to cause a denial of service...

DST2K0006: Denial of Service Possibility in Imate WebMail Server v2.5

========================================================================== ====== Delphis Consulting Plc ========================================================================== ====== Security Team Advisories 26/05/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers...

Computalynx CMail 2.3 SP22.4 - SMTP Buffer Overflow

Computalynx CMail 2.3 SP22.4 - SMTP Buffer Overflow // source: https://www.securityfocus.com/bid/633/info There is a buffer overflow in the CMail SMTP service long MAIL FROM: that may allow an attacker to execute arbitrary code on the target server. CMail Server...

Computalynx CMail 2.3 SP2/2.4 - SMTP Buffer Overflow

// source: https://www.securityfocus.com/bid/633/info There is a buffer overflow in the CMail SMTP service long MAIL FROM: that may allow an attacker to execute arbitrary code on the target server. CMail Server /============================================================================= CMAIL...

ibm.as400.smtp.DoS.txt

Date: Tue, 4 May 1999 08:53:14 +0200 From: Joachim Larsson To: [email protected] Subject: AS/400 Hello all. I played around with smtp on a as/400+domino machine and found two obvious bugs, then notified IBM, revieved a ptf, then posted here. 1: telnet host 25, then start feeding chars. After...

SmartMax MailMax 1.0 - SMTP Buffer Overflow

SmartMax MailMax 1.0 - SMTP Buffer Overflow // source: https://www.securityfocus.com/bid/2312/info Smartmax MailMax is an email server for Windows 95/98/NT. It is vulnerable to buffer overflow attacks against the SMTP-command processing function. This can be exploited to execute arbitrary command...