lil' exim format bug

Hi BugTrackers Just a little bug to tell: THE BUG ------- accept.c, line 2506: else if smtpreply != NULL moansmtpbatchNULL, smtpreply; while moansmtpbatch is like this: moansmtpbatchchar cmdbuffer, char format, ... So when smtpreply contains format strings, it get transformed by moansmtpbatch. Wh...

scx-sa-20.txt

============================================================================= Securax-SA-20 Security Advisory belgian.networking.security Dutch ============================================================================= Topic: 1st Up Mail Server multiple command denial of service. Announced:...

CVE-2001-0397

Buffer overflow in Silent Runner Collector SRC 1.6.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long SMTP HELO command...

CVE-2001-0397: Undefined Security Weakness

Buffer overflow in Silent Runner Collector SRC 1.6.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long SMTP HELO command...

CVE-2001-0039

IPSwitch IMail SMTP Buffer Overflow affects the IMail SMTP daemon (versions

CVE-2001-0039

IPSwitch IMail 6.0.5 allows remote attackers to cause a denial of service using the SMTP AUTH command by sending a base64-encoded user password whose length is between 80 and 136 bytes...

CVE-2001-0039: Undefined Security Weakness

IPSwitch IMail 6.0.5 allows remote attackers to cause a denial of service using the SMTP AUTH command by sending a base64-encoded user password whose length is between 80 and 136 bytes...

CVE-2001-0280

Buffer overflow in MERCUR SMTP server 3.30 allows remote attackers to execute arbitrary commands via a long EXPN command...

IPSwitch IMail 6.06 SMTP Remote System Access Vulnerability

IPSwitch IMail 6.06 SMTP Remote System Access Vulnerability Release Date: April 24, 2001 Severity: High Systems Affected: Systems running IPSwitch's IMail 6.06 SMTP daemon. Prior versions are most likely vulnerable. Description: There exists a vulnerability within IMail that allows remote attacke...

Advisory for Viking

Advisory for Viking Viking is made by Robtex. Site: http://www.robtex.com/viking by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0107 /-|=explanation=|- Viking is a webserver. It has a simple hex encoded dot dot bug. /-|=who is vulnerable=|- Tested to be vulnerable: Viki...

Silent Runner Collector - HELO buffer overflow vulnerability

Hello, Silent Runner Collector SRC has a buffer overflow condition in the routines that parse SMTP traffic. SRC is the "sniffer" conponent of the Silent Runner network traffic analysis suite. The overflow was noticed in SRC v1.6.1 but is likely present in other versions as well. The actual buffer...

Дырка в Silent Runner Collector (buffer overflow)

Переполнение буфера при анализе SMTP-трафика...

Lotus Domino SMTP Server Allows Anonymous Relay of Quoted Addresses

Overview Lotus Domino includes an SMTP server. Under certain configurations, an intruder may be able to relay mail to third parties through the Domino SMTP server. Description An "open" mail server is one that will send mail that is not addressed to and does not originate from a local user. Open...

CVE-2001-1445

Unknown vulnerability in the SMTP server in Lotus Domino 5.0 through 5.7 allows remote attackers to bypass mail relaying restrictions via crafted e-mail addresses in "RCPT TO" commands...

MERCUR SMTP Server EXPN Command Remote Overflow

It was possible to make the remote mail server crash when issuing a very long argument to the EXPN command. A remote attacker could exploit this flaw to crash the service, or possibly execute arbitrary code. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security...

Дырка в Mercur Mailserver

Переполнение буфера в SMTP-команде EXPN...

Mercur Mailserver 3.3 buffer overflow with EXPN

By default SMTP server is installed to be run from LocalSystem account. This makes it easy to make any action on the target system if an attacker could gain control over the code execution flow of the product. Particulary, MERCUR SMTP-Service binary MCRSMTP.EXE version 3.30.3.0 suffers from buffe...

Atrium Software Mercur Mail Server 3.3 - EXPN Buffer Overflow

// source: https://www.securityfocus.com/bid/2412/info Atrium Software Mercur Mail Server 3.3 contains an unchecked buffer for the EXPN command which may lead to a denial of service attack or execution of arbitrary code depending on the data entered. If a remote attacker were to telnet to the SMT...

Atrium Software Mercur Mail Server 3.3 - EXPN Buffer Overflow

Atrium Software Mercur Mail Server 3.3 - EXPN Buffer Overflow // source: https://www.securityfocus.com/bid/2412/info Atrium Software Mercur Mail Server 3.3 contains an unchecked buffer for the EXPN command which may lead to a denial of service attack or execution of arbitrary code depending on th...

CVE-2001-0039

IPSwitch IMail 6.0.5 allows remote attackers to cause a denial of service using the SMTP AUTH command by sending a base64-encoded user password whose length is between 80 and 136 bytes...