Vulnerability in Diffie-Hellman ciphers affects sendmail on VIOS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Mon Mar 29 15:54:57 CDT 2010 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/sendmailadvisory.asc VULNERABILITY SUMMARY VULNERABILITY: AIX sendmail SSL...

Sendmail SMTP Timeout Buffer Overflow (CVE-2006-0058)

Sendmail is a very popular Mail Transfer Agent MTA program that is typically used by medium to large size organizations and Internet Service Providers to send, accept, and relay e-mail. The program uses the SMTP protocol, defined in RFC 821, to communicate with clients when performing these tasks...

CVE-2010-0161

The nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp in Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 on Windows Vista, Windows Server 2008 R2, and Windows 7 allows remote SMTP, IMAP, and POP servers to cause a denial of service heap memory corruption and applicatio...

CVE-2010-0161

CVE-2010-0161 affects Thunderbird (before 2.0.0.24) and SeaMonkey (before 1.1.19) on Windows, where the nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp can be triggered by data from a remote SMTP/IMAP/POP server using SSPI. This may cause heap memory corruption and application crash...

CVE-2010-0161

The nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp in Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 on Windows Vista, Windows Server 2008 R2, and Windows 7 allows remote SMTP, IMAP, and POP servers to cause a denial of service heap memory corruption and applicatio...

IBM Lotus Notes HTML Speed Reader Long URL Buffer Overflow (CVE-2005-2618)

Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communication with email servers over the SMTP, POP and IMAP protocols. A stack buffer overflow vulnerability exists in the IBM Lotus Notes HTML Speed...

ZoneAlarm SMTP Buffer Overflow (CVE-2004-0309)

Zone Alarm and Integrity Client products provide application-level SMTP session processing. A vulnerability exists in the SMTP protocol processing function in ZoneLabs' ZoneAlarm 4.x and Integrity client 4.x products. The vulnerability can be triggered by sending specific malformed links to the...

Microsoft Exchange Server Buffer Overflow (CVE-2005-0560)

Microsoft Exchange Server is a messaging and collaboration server. It is an extensive application designed to provide email and scheduling capabilities for medium to large organizations. The server has the capability to communicate with email clients and other servers using the SMTP protocol. A...

SpamAssassin Milter Plugin 'mlfi_envrcpt()' Remote Arbitrary Command Injection Vulnerability - Active Check

SpamAssassin Milter Plugin is prone to a remote command injection vulnerability because it fails to adequately sanitize user-supplied input data. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

smtp-enum-users NSE Script

Attempts to enumerate the users on a SMTP server by issuing the VRFY, EXPN or RCPT TO commands. The goal of this script is to discover all the user accounts in the remote system. The script will output the list of user names that were found. The script will stop querying the SMTP server if...

XMail < 1.27 Insecure Temporary File Creation

According to its SMTP service banner, the version of XMail running on the remote host creates temporary files insecurely. A local attacker could exploit this to overwrite arbitrary files by using symlink attacks, which could lead to privilege escalation. C Tenable Network Security, Inc...

SMTP Banner Grabber

SMTP Banner Grabber This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SMTP Banner Grabber', 'Description' = 'SMTP Banner Grabber', 'References' = 'URL', 'http://www.ietf.org/rfc/rfc2821.txt', ,...

IBM Lotus Notes Attachment Viewer UUE File Handling Buffer Overflow (CVE-2005-2618)

Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communicating with email servers over the SMTP, POP and IMAP protocols. There exists a buffer overflow vulnerability in IBM Lotus Notes Attachment Viewer...

MDaemon SMTP and IMAP Command Buffer Overflow (CVE-2004-1546)

MDaemon is a Windows-based email server that provides full mail server functionality. MDaemon supports the SMTP, IMAP and POP3 protocols. A vulnerability exists in the way the MDaemon mail server processes certain SMTP and IMAP commands. A stack buffer overflow occurs when an overly long argument...

Debian DSA-1985-1 : sendmail - insufficient input validation

It was discovered that sendmail, a Mail Transport Agent, does not properly handle a '\0' character in a Common Name CN field of an X.509 certificate. This allows an attacker to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority,...

Microsoft SMTP Server DNS Handling (MS04-035; CVE-2004-0840)

Both Microsoft Windows and Microsoft Exchange include an SMTP service that, among other things, delivers outgoing email messages without the use of an external SMTP server. To perform such email delivery, the SMTP service follows these steps for every recipient email address. A vulnerability exis...

McAfee WebShield SMTP Bounce Message Format String (CVE-2006-0559)

McAfee WebShield SMTP is an application designed to scan incoming SMTP messages for viruses before forwarding them to their destinations. Since WebShield may be set up to work independently of any real SMTP servers, it can act as a partially-featured SMTP server on its own, with respect to...

SuSE Update for postfix SUSE-SA:2010:011

Check for the Version of postfix OpenVAS Vulnerability Test SuSE Update for postfix SUSE-SA:2010:011 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

openSUSE Security Update : postfix (postfix-1969)

The value of SMTPDLISTENREMOTE accidentally defaulted to 'yes'. The postfix smtp daemon therefore was reachable over the network by default. This update therefore resets the value to 'no' in /etc/sysconfig/mail. If you intentionally want postfix to listen for remote connection you need to manuall...

Microsoft Outlook 2002 Script Execution (CVE-2004-0121)

Microsoft provides server and client side implementations of email protocols such as SMTP, POP3 and IMAP. The widely used Microsoft Outlook product is an implementation of an email client capable of handling most standard Internet protocols as well as numerous proprietary Microsoft protocols and...