NAI WebShield SMTP GET_CONFIG Information Disclosure

The remote NAI WebShield SMTP Management tool gives away its configuration when it is issued the command : GETCONFIG This may be of some use to an attacker to gain more knowledge about this system. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid10424; scriptversion...

DST2K0003 : Buffer Overrun in NAI WebShield SMTP v4.5.44 Managem ent Tool

========================================================================== ====== Delphis Consulting Plc ========================================================================== ====== Security Team Advisories 08/05/2000 [email protected]...

Дырки в WebShield

Утилита конфигурации порт 9999/TCP во-первых позволяет получать конфигурацию без авторизации, а во-вторых содержит переполнения буфера, позволяющие выполнение кода...

CVE-2000-0448

The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP address does not resolve to a hostname, which allows remote attackers to access the configuration via the GETCONFIG command...

CVE-2000-0447

Buffer overflow in WebShield SMTP 4.5.44 allows remote attackers to execute arbitrary commands via a long configuration parameter to the WebShield remote management service...