Проблемы с SMTP-прокси

Многие SMTP-прокси сервера используемые в качестве брандмауэров позволяют обойти защиту SMTP-Сервера с помощью команды DATA, расположенной до RCPT:. В таком случае все команды следующие далее будут восприниматься как данные и не будут проверяться...

SX-20000620-3

FSC Internet Corp. / SecureXpert Labs SecureXpert Labs Advisory SX-20000620-3 - Partial Denial of Service in Check Point Firewall-1 on Windows NT Summary The SMTP Security Server component of Check Point Firewall-1 4.0 and 4.1 is vulnerable to a simple network-based attack which raises the firewa...

ITHouse Mail Server v1.04 To: Field Handling Overflow

The remote SMTP server is ITHouse Mail Server. Versions 1.04 or earlier of this server are vulnerable to a buffer overrun which happens during the delivery routine of the mails if an attacker has sent a message with a too long 'To:' field. An attacker may use this flaw to execute arbitrary code o...

CVE-2000-0582

Check Point FireWall-1 4.0 and 4.1 allows remote attackers to cause a denial of service by sending a stream of invalid commands such as binary zeros to the SMTP Security Server proxy...

Check Point Software Firewall-1 4.01.4.1 - Resource Exhaustion (Denial of Service)

Check Point Software Firewall-1 4.01.4.1 - Resource Exhaustion Denial of Service source: https://www.securityfocus.com/bid/1416/info The Check Point Firewall-1 SMTP Security Server in Firewall-1 4.0 and 4.1 on Windows NT is vulnerable to a simple network-based attack which can increase the...

Check Point Software Firewall-1 4.0/1.4.1 - Resource Exhaustion (Denial of Service)

source: https://www.securityfocus.com/bid/1416/info The Check Point Firewall-1 SMTP Security Server in Firewall-1 4.0 and 4.1 on Windows NT is vulnerable to a simple network-based attack which can increase the firewall's CPU utilization to 100%. Sending a stream of binary zeros or other invalid...

DoS против WebMail

Переполнение буфера в SMTP-команде HELO. В CMail - переполнение буфера при длинном имени пользователя в веб-интерфейсе порт 8002...

NetWin DSMTP (Dmail) ETRN Command Overflow

The remote SMTP server is vulnerable to a buffer overflow when the ETRN command is issued arguments which are too long. A remote attacker could exploit this to crash the SMTP server, or possibly execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; if description...

Imate SMTP Server HELO Command Remote Overflow DoS

The remote SMTP server crashes when it is issued a HELO command with an argument longer than 1200 chars. This problem may allow an attacker to shut down your SMTP server. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10435; scriptversion "1.28";...

Переполнение буфера в DMail Server

Классическое переполнение буфера в SMTP-команде ETRN...

DST2K0003.txt

================================================================================ Delphis Consulting Plc ================================================================================ Security Team Advisories 08/05/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

Переполнение буфера в ITHouse Mail Server

Классическое переполнение буфера в SMTP-команде RCPT TO:...

DST2K0006: Denial of Service Possibility in Imate WebMail Server v2.5

========================================================================== ====== Delphis Consulting Plc ========================================================================== ====== Security Team Advisories 26/05/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers...

DST2K0007: Buffer Overrun in ITHouse Mail Server v1.04

========================================================================== ====== Delphis Consulting Plc ========================================================================== ====== Security Team Advisories 30/05/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers...

NAI WebShield SMTP GET_CONFIG Information Disclosure

The remote NAI WebShield SMTP Management tool gives away its configuration when it is issued the command : GETCONFIG This may be of some use to an attacker to gain more knowledge about this system. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid10424; scriptversion...

Дырки в Lotus Domino

Классическое переполнение буфера в SMTP-команде MAIL FROM: при буфере свыше 4Kb. Кроме того, в конфигурации по-умолчанию документы могут быть модифицированы через Web-сервер. Кроме того, возможна DoS атака против почтового сервера, при посылке письма с одного несуществующего адреса на другой...

Infinite loop in LOTUS NOTE 5.0.3. SMTP SERVER

Maybe this is a configuration error in the server where I tryed this but anyway here is the message that I sent : helo xpto.pt mail from: non-existant-user@ipadressoflotusserver mail to : non-existant-user data testing123 . So Lotus Notes SMTP Server now will loop forever trying to tell to the...

Еще одно переполнение буфера в VirusWall

Ошибка в SMTP-шлюзе - переполнение буфера при разборе UU-кодирования...

CVE-2000-0447

Buffer overflow in WebShield SMTP 4.5.44 allows remote attackers to execute arbitrary commands via a long configuration parameter to the WebShield remote management service...

CVE-2000-0448

The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP address does not resolve to a hostname, which allows remote attackers to access the configuration via the GETCONFIG command...