Avirt Mail 4.x DoS

Issue: ------ Avirt Mail 4.x up to latest version is vulnerable to denial of service while handling a SMTP session. Tested versions: ---------------- Avirt Mail 4.0 build 4124 - vulnerable Avirt Mail 4.2 build 4807 - vulnerable Both versions where tested on Windows 98 since I do not have access...

CVE-2000-0738

WebShield SMTP 4.5 allows remote attackers to cause a denial of service by sending e-mail with a From: address that has a . period at the end, which causes WebShield to continuously send itself copies of the e-mail...

CVE-2000-0320

CVE-2000-0320 affects Qpopper 2.53 and 3.0, where the POP server fails to correctly identify the end-of-message delimiter, allowing a remote attacker to cause denial of service or mailbox corruption via a crafted 1023-character line ending with a newline. Root cause: improper parsing of the end-o...

CVE-2000-0447

CVE-2000-0447 describes a buffer overflow in WebShield SMTP 4.5.44’s remote management service. A long configuration parameter passed to the WebShield remote management interface can lead to remote command execution. The vulnerability is triggered via the management/config parameter (remote servi...

CVE-2000-0582

CVE-2000-0582 affects Check Point FireWall-1 releases 4.0 and 4.1. A remote attacker can cause a denial of service by sending a stream of invalid commands (e.g., binary zeros) to the SMTP Security Server proxy. The available sources confirm the affected product/versions and the impact as describe...

CVE-2000-0582

Check Point FireWall-1 4.0 and 4.1 allows remote attackers to cause a denial of service by sending a stream of invalid commands such as binary zeros to the SMTP Security Server proxy...

CVE-2000-0075

CVE-2000-0075 refers to the Super Mail Transfer Package (SMTP), later called MsgCore, suffering a memory leak that allows remote attackers to cause a denial of service by repeatedly issuing HELO, MAIL FROM, RCPT TO, and DATA commands within the same SMTP session. The affected product is described...

CVE-2000-0448

CVE-2000-0448 affects WebShield SMTP Management Tool 4.5.44. The vulnerability is an access-control flaw: the management port is not properly restricted when an IP address does not resolve to a hostname, allowing remote access to the configuration via the GET_CONFIG command. Documentation notes a...

CVE-2000-0448

The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP address does not resolve to a hostname, which allows remote attackers to access the configuration via the GETCONFIG command...

CVE-2000-0447

Buffer overflow in WebShield SMTP 4.5.44 allows remote attackers to execute arbitrary commands via a long configuration parameter to the WebShield remote management service...

CVE-2000-0447: Undefined Security Weakness

Buffer overflow in WebShield SMTP 4.5.44 allows remote attackers to execute arbitrary commands via a long configuration parameter to the WebShield remote management service...

CVE-2000-0075: Undefined Security Weakness

Super Mail Transfer Package SMTP, later called MsgCore, has a memory leak which allows remote attackers to cause a denial of service by repeating multiple HELO, MAIL FROM, RCPT TO, and DATA commands in the same session...

CVE-2000-0448: Undefined Security Weakness

The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP address does not resolve to a hostname, which allows remote attackers to access the configuration via the GETCONFIG command...

CVE-2000-0582: Undefined Security Weakness

Check Point FireWall-1 4.0 and 4.1 allows remote attackers to cause a denial of service by sending a stream of invalid commands such as binary zeros to the SMTP Security Server proxy...

Nevis Systems All-Mail 1.1 - Remote Buffer Overflow

Nevis Systems All-Mail 1.1 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/1789/info All-mail is an smtp server for Windows NT and 2000 platforms offered by Nevis Systems. It is vulnerable to remotely exploitable buffer overflow attacks that may lead to an attacker gaining...

Nevis Systems All-Mail 1.1 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/1789/info All-mail is an smtp server for Windows NT and 2000 platforms offered by Nevis Systems. It is vulnerable to remotely exploitable buffer overflow attacks that may lead to an attacker gaining control of the victim host. The condition is known to...

Cisco PIX Firewall Mailguard Feature SMTP Content Filter Bypass

The remote SMTP server seems to be protected by a content filtering firewall probably Cisco's PIX. However, an attacker may bypass this content filtering by issuing a DATA command before a MAIL command, that allows him to directly communicate with the real SMTP daemon. C Tenable Network Security,...

ecurity Advisory: Cisco Secure PIX Firewall Mailguard Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco Secure PIX Firewall Mailguard Vulnerability Revision 1.0 For public release 2000 Sept 27 08:00 AM US/Pacific UTC+0700 Summary The Cisco Secure PIX firewall feature "mailguard," which limits SMTP commands to a specified minimum set of commands, can be...

Cisco PIX Firewall (smtp content filtering hack)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 How to escape "fixup smtp" of Cisco Pix Firewall: The Cisco Pix Firewall normally restrict some protocol commandhttp,ftp,smtp and manage multisession protocolh323, ftp,sqlnet . I made some test on a BSDI3.0 running sendmail9 placed in the dmz . The Pi...

Cisco PIX Firewall 4.x5.x - SMTP Content Filtering Evasion

Cisco PIX Firewall 4.x5.x - SMTP Content Filtering Evasion source: https://www.securityfocus.com/bid/1698/info Like other firewalls, the Cisco PIX Firewall implements technology that reads the contents of packets passing through it for application-level filtering. In the case of SMTP, it can be...