6643 matches found
Infinite loop in LOTUS NOTE 5.0.3. SMTP SERVER
Maybe this is a configuration error in the server where I tryed this but anyway here is the message that I sent : helo xpto.pt mail from: non-existant-user@ipadressoflotusserver mail to : non-existant-user data testing123 . So Lotus Notes SMTP Server now will loop forever trying to tell to the...
Еще одно переполнение буфера в VirusWall
Ошибка в SMTP-шлюзе - переполнение буфера при разборе UU-кодирования...
CVE-2000-0448
The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP address does not resolve to a hostname, which allows remote attackers to access the configuration via the GETCONFIG command...
CVE-2000-0447
Buffer overflow in WebShield SMTP 4.5.44 allows remote attackers to execute arbitrary commands via a long configuration parameter to the WebShield remote management service...
CVE-2000-0033
CVE-2000-0033 affects InterScan VirusWall SMTP scanner; vulnerability arises from improper handling of messages with malformed attachments. CVSS v2 base score 5.0 (MEDIUM) with no confidentiality/availability impact and partial integrity impact. No remediation details are provided in the documents.
CVE-1999-0203
CVE-1999-0203 affects Sendmail. The vulnerability arises when an SMTP session uses an improper MAIL FROM and an invalid RCPT TO that cause a bounce to a program, enabling an attacker to gain root privileges on the host. Several connected entries corroborate the issue and describe the impact as re...
CVE-1999-0203
In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "rcpt to" address that would cause the mail to bounce to a program...
CVE-2000-0033
InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments...
CVE-1999-0203: Undefined Security Weakness
In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "rcpt to" address that would cause the mail to bounce to a program...
CVE-2000-0033: Undefined Security Weakness
InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments...
Переполнение буфера в SMTP-шлюзе VirusWall
Переполнение буфера в SMTP-команде HELO позволяет выполнить код на удаленном комьютере. Выпущенный производителем патч оставляет возможность DoS-атаки...
New DOS on Interscan NT/3.32
One month ago, during a audit, we found a new remote DOS on TrendMicro Interscan for NT last version V3.32, build 1011 and 1022. Last October, USSR Labs found a buffer overflow in HELO command, and wrote a very nice exploit with shell code, giving SYSTEM shell access to remote attacker. Trendmicr...
Trend Micro InterScan 3.32 SMTP HELO Command Remote Overflow DoS
It was possible to perform a denial of service against the remote Interscan SMTP server by sending it a special long HELO command. This problem allows an attacker to prevent your Interscan SMTP server from handling requests. This script was written by Alain Thivillon Script audit and contribution...
Re: IMAIL (Ipswitch) DoS with Eudora (Qualcomm)
I'm the lead developer for Windows Eudora here at Qualcomm, and I've been the one who has investigated these issues of SMTP authentication with IPSwitch's IMail server. Here's some details that may be helpful for IMail users: The problem is with IMail SMTP server versions 6.02 and below. When the...
DoS против IMail
ВО время авторизации почтового клиента с использованием SMTP-AUTH блокируется библиотека авторизации и другие клиенты не могут быть авторизованы, при этом не используется таймаут. Ошибка в реализации протокола авторизации приводит к тому, что часть стандартных почтовых клиентов блокируют...
Re: IMAIL (Ipswitch) DoS with Eudora (Qualcomm)
Ipswitch blames BOTH NetScape AND Eudora for not following RFC's, but does nothing to control the situation. It is very simple to deny service to any IMAIL 5.xx or 6.xx server as follows. IMAIL allows SMTP AUTH using various methods, including CRAM-MD5 and LOGIN If a Eudora 4.3 client attaches to...
Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows (1)
// source: https://www.securityfocus.com/bid/1051/info Atrium Software Mercur is a SMTP, POP3, and IMAP mail server. Insufficient boundary checking exists in the code that handles within the SMTP "mail from" command, the POP3 "user" command and the IMAP "login" command. The application will crash...
Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows (2)
Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows 2 source: https://www.securityfocus.com/bid/1051/info Atrium Software Mercur is a SMTP, POP3, and IMAP mail server. Insufficient boundary checking exists in the code that handles within the SMTP "mail from" command, the POP3 "user...
Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows (1)
Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows 1 // source: https://www.securityfocus.com/bid/1051/info Atrium Software Mercur is a SMTP, POP3, and IMAP mail server. Insufficient boundary checking exists in the code that handles within the SMTP "mail from" command, the POP3...
Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows (2)
source: https://www.securityfocus.com/bid/1051/info Atrium Software Mercur is a SMTP, POP3, and IMAP mail server. Insufficient boundary checking exists in the code that handles within the SMTP "mail from" command, the POP3 "user" command and the IMAP "login" command. The application will crash if...