1640 matches found
Sendmail with clamav-milter < 0.91.2 - Remote Command Execution
black-hole.pl Sendmail w/ clamav-milter Remote Root Exploit Copyright c 2007 Eliteboy use IO::Socket; print "Sendmail w/ clamav-milter Remote Root Exploit\n"; print "Copyright C 2007 Eliteboy\n"; if $ARGV != 0 print "Give me a host to connect.\n";exit; print "Attacking $ARGV0...\n"; $sock =...
skyline.py.txt
!python C 2007 kcope production from ftplib import FTP import sys import socket print "Sendmail/Postfix FORWARD Remote Exploit" print "kcope/2007 - hey alex,andi" if lensys.argv != 4: print "usage: skyline.py " sys.exit hostname = sys.argv1 username = sys.argv2 password = sys.argv3 print "+ INITI...
SuSE 10 Security Update : sendmail (ZYPP Patch Number 2030)
Without this update sendmail may crash when finishing a mail due to referencing an already freed variable. CVE-2006-4434 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Sendmail <= 8.13.5 Remote Signal Handling Exploit PoC
No description provided by source. !/usr/bin/env python [email protected] Sendmail 8.13.5 and below Remote Signal Handling exploit usage: rbl4ck-sendmail.py 127.0.0.1 0 25 this exploit was leaked to the PHC Phrack High Council so instead of only letting them have a copy, we figure...
CVE-2002-2423
CVE-2002-2423 affects Sendmail versions 8.12.0 through 8.12.6. The vulnerability arises because log messages longer than 100 characters are truncated, allowing a remote attacker to prevent the IP address from being logged via a long IDENT response. The connected Red Hat entry and other CVE record...
CVE-2002-2423
Sendmail 8.12.0 through 8.12.6 truncates log messages longer than 100 characters, which allows remote attackers to prevent the IP address from being logged via a long IDENT response...
CVE-2002-2261
Sendmail 8.9.0 through 8.12.6 allows remote attackers to bypass relaying restrictions enforced by the 'checkrelay' function by spoofing a blank DNS hostname...
CVE-2002-2261
CVE-2002-2261 affects Sendmail versions 8.9.0–8.12.6. The flaw allows remote attackers to bypass relaying restrictions enforced by the check_relay function by spoofing a blank DNS hostname. Root cause is related to how the relay check handles DNS hostnames, enabling unauthorized relaying. No expl...
CVE-2002-2261
Sendmail 8.9.0 through 8.12.6 allows remote attackers to bypass relaying restrictions enforced by the 'checkrelay' function by spoofing a blank DNS hostname...
CVE-2003-1362
Bastille B.02.00.00 on HP-UX 11.00/11.11 does not properly configure NOVRFY and NOEXPN in sendmail.cf, enabling potential remote user enumeration and alias expansion via the mail system. Affected component is sendmail configuration handling in Bastille’s HP-UX environment; root cause is misconfig...
CVE-2003-1362
Bastille B.02.00.00 of HP-UX 11.00 and 11.11 does not properly configure the 1 NOVRFY and 2 NOEXPN options in the sendmail.cf file, which could allow remote attackers to verify the existence of system users and expand defined sendmail aliases...
openSUSE 10 Security Update : sendmail (sendmail-1607)
Specially crafted MIME messages can crash sendmail and block queue processing. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update sendmail-1607. The text description of this plugin is C SUSE LLC...
openSUSE 10 Security Update : sendmail (sendmail-2027)
Without this update sendmail may crash when finishing a mail due to referencing an already freed variable CVE-2006-4434. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update sendmail-2027. The text...
Hardcoded credentials
hpssd in Hewlett-Packard Linux Imaging and Printing Project hplip 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail...
CVE-2007-5208
hpssd in Hewlett-Packard Linux Imaging and Printing Project hplip 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail...
CVE-2007-5208
hpssd in Hewlett-Packard Linux Imaging and Printing Project hplip 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail...
DEBIAN-CVE-2007-5208
hpssd in Hewlett-Packard Linux Imaging and Printing Project hplip 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail...
CVE-2007-5208
CVE-2007-5208 affects the HP Linux Imaging and Printing Project (HPLIP) hpssd daemon. Affected: hplip 1.x and 2.x before 2.7.10. Description from multiple sources indicates that input handling of the From address during sendmail invocation allows context-dependent attackers to execute arbitrary c...
CVE-2007-5208
hpssd in Hewlett-Packard Linux Imaging and Printing Project hplip 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail...
CVE-2007-5208
hpssd in Hewlett-Packard Linux Imaging and Printing Project hplip 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail...