CVE-1999-0203

CVE-1999-0203 affects Sendmail. The vulnerability arises when an SMTP session uses an improper MAIL FROM and an invalid RCPT TO that cause a bounce to a program, enabling an attacker to gain root privileges on the host. Several connected entries corroborate the issue and describe the impact as re...

CVE-2000-0033

InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments...

CVE-1999-0203: Undefined Security Weakness

In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "rcpt to" address that would cause the mail to bounce to a program...

CVE-2000-0033: Undefined Security Weakness

InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments...

Переполнение буфера в SMTP-шлюзе VirusWall

Переполнение буфера в SMTP-команде HELO позволяет выполнить код на удаленном комьютере. Выпущенный производителем патч оставляет возможность DoS-атаки...

New DOS on Interscan NT/3.32

One month ago, during a audit, we found a new remote DOS on TrendMicro Interscan for NT last version V3.32, build 1011 and 1022. Last October, USSR Labs found a buffer overflow in HELO command, and wrote a very nice exploit with shell code, giving SYSTEM shell access to remote attacker. Trendmicr...

Trend Micro InterScan 3.32 SMTP HELO Command Remote Overflow DoS

It was possible to perform a denial of service against the remote Interscan SMTP server by sending it a special long HELO command. This problem allows an attacker to prevent your Interscan SMTP server from handling requests. This script was written by Alain Thivillon Script audit and contribution...

Re: IMAIL (Ipswitch) DoS with Eudora (Qualcomm)

I'm the lead developer for Windows Eudora here at Qualcomm, and I've been the one who has investigated these issues of SMTP authentication with IPSwitch's IMail server. Here's some details that may be helpful for IMail users: The problem is with IMail SMTP server versions 6.02 and below. When the...

DoS против IMail

ВО время авторизации почтового клиента с использованием SMTP-AUTH блокируется библиотека авторизации и другие клиенты не могут быть авторизованы, при этом не используется таймаут. Ошибка в реализации протокола авторизации приводит к тому, что часть стандартных почтовых клиентов блокируют...

Re: IMAIL (Ipswitch) DoS with Eudora (Qualcomm)

Ipswitch blames BOTH NetScape AND Eudora for not following RFC's, but does nothing to control the situation. It is very simple to deny service to any IMAIL 5.xx or 6.xx server as follows. IMAIL allows SMTP AUTH using various methods, including CRAM-MD5 and LOGIN If a Eudora 4.3 client attaches to...

Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows (1)

// source: https://www.securityfocus.com/bid/1051/info Atrium Software Mercur is a SMTP, POP3, and IMAP mail server. Insufficient boundary checking exists in the code that handles within the SMTP "mail from" command, the POP3 "user" command and the IMAP "login" command. The application will crash...

Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows (2)

Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows 2 source: https://www.securityfocus.com/bid/1051/info Atrium Software Mercur is a SMTP, POP3, and IMAP mail server. Insufficient boundary checking exists in the code that handles within the SMTP "mail from" command, the POP3 "user...

Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows (1)

Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows 1 // source: https://www.securityfocus.com/bid/1051/info Atrium Software Mercur is a SMTP, POP3, and IMAP mail server. Insufficient boundary checking exists in the code that handles within the SMTP "mail from" command, the POP3...

Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows (2)

source: https://www.securityfocus.com/bid/1051/info Atrium Software Mercur is a SMTP, POP3, and IMAP mail server. Insufficient boundary checking exists in the code that handles within the SMTP "mail from" command, the POP3 "user" command and the IMAP "login" command. The application will crash if...

CVE-2000-0158

Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon...

CVE-2000-0158: Undefined Security Weakness

Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon...

CVE-2000-0158

Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon...

CVE-1999-0098

CVE-1999-0098 refers to a buffer overflow in the SMTP HELO command of Sendmail , as described in multiple connected sources. The issue allows a remote attacker to hide activities and potentially compromise system state by overflowing the HELO handling. Connected documents confirm the affected com...

CVE-1999-0531

The connected documents describe a vulnerability class where an SMTP service that supports commands like VRFY and EXPN can enumerate valid user accounts (revealing aliases or mailing lists). The evidence includes a Metasploit module (SMTP User Enumeration Utility) and CIRCL/CVE references linking...

CVE-1999-0419

CVE-1999-0419 relates to the Microsoft SMTP service: when delivering to a server that replies with a 4xx error, the service rapidly and repeatedly retries redelivery, causing a denial of service. Public sources (Red Hat, CVE/NVD entries, PT Security) describe the issue and indicate affected behav...