Mail Carrier 2.5.1 Buffer Overflow

Exploit Title: Tabs Mail Carrier 2.5.1 MAIL FROM: Buffer Overflow Date: March 14, 2019 Exploit Author: Joseph McDonagh Vendor Homepage: N/A Software Link: N/A Version: Mail Carrier 2.5.1 Tested on: Windows Vista Home Basic SP2 CVE: None !/usr/bin/python This script started from PWK, Chapter 6 I a...

Mail Carrier 2.5.1 - MAIL FROM Buffer Overflow

Mail Carrier 2.5.1 - MAIL FROM Buffer Overflow Exploit Title: Tabs Mail Carrier 2.5.1 MAIL FROM: Buffer Overflow Date: March 14, 2019 Exploit Author: Joseph McDonagh Vendor Homepage: N/A Software Link: N/A Version: Mail Carrier 2.5.1 Tested on: Windows Vista Home Basic SP2 CVE: None...

The vulnerability of the base64D function in the STMP listener component of the Exim mail server allows a attacker to execute arbitrary code.

The vulnerability of the base64 component of the STMP listener in the Exim mail server arises from buffer overflows during data processing, where the size of the buffer is not a multiple of 4 4n + 3. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...

Exim 4.89 - BDAT Denial of Service Exploit

Exploit for multiple platform in category dos / poc While parsing BDAT data header, exim still scans for '.' and consider it the end of mail. https://github.com/Exim/exim/blob/master/src/src/receive.cL1867 Exim goes into an incorrect state after this message is sent because the function pointer...

SMTP NTLM Domain Extraction

Extract the Windows domain name from an SMTP NTLM challenge. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SMTP NTLM Domain Extraction', 'Description' = 'Extract the Windows domain name from ...

TABS MailCarrier 2.51 - SMTP EHLO Overflow

No description provided by source. $Id: mailcarriersmtpehlo.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...

Nmap NSE 6.01: smtp-commands

Attempts to use EHLO and HELP to gather the Extended commands supported by an SMTP server. SYNTAX: smtp.domain: or smtp-commands.domain Define the domain to be used in the SMTP commands. OpenVAS Vulnerability Test $Id: gbnmap6smtpcommands.nasl 7006 2017-08-25 11:51:20Z teissa $ Autogenerated NSE...

Nmap NSE 6.01: smtp-open-relay

Attempts to relay mail by issuing a predefined combination of SMTP commands. The goal of this script is to tell if a SMTP server is vulnerable to mail relaying. An SMTP server that works as an open relay, is a email server that does not verify if the user is authorised to send email from the...

Session fixation

Websense Email Security 7.1 before Hotfix 4 allows remote attackers to bypass the sender-based blacklist by using the 8BITMIME EHLO keyword in the SMTP session...

CVE-2009-5121

Websense Email Security 7.1 prior to Hotfix 4 is vulnerable to bypassing the sender-based blacklist via the 8BITMIME EHLO keyword in the SMTP session. The root cause is the SMTP handling that permits 8BITMIME EHLO, enabling remote attackers to circumvent blacklist checks. The public description c...

SSL/TLS: SMTP 'STARTTLS' Command Detection

Checks if the remote SMTP server supports SSL/TLS with the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

smtp-commands NSE Script

Attempts to use EHLO and HELP to gather the Extended commands supported by an SMTP server. Script Arguments smtp.domain or smtp-commands.domain Define the domain to be used in the SMTP commands. smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername See the documentation for the smbaut...

TABS MailCarrier v2.51 SMTP EHLO Overflow

This module exploits the MailCarrier v2.51 suite SMTP service. The stack is overwritten when sending an overly long EHLO command. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'TABS MailCarrie...

Imail 8.10-8.12 (RCPT TO) Remote Buffer Overflow Exploit (meta)

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same...

Imail 8.10-8.12 (RCPT TO) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ======================================================== Imail 8.10-8.12 RCPT TO Remote Buffer Overflow Exploit ======================================================== !/usr/bin/perl...

Ipswitch IMail Server 8.10-8.12 - RCPT TO Remote Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

Buffer overflow

Buffer overflow in BL4 SMTP Server 0.1.4 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via a long argument to the 1 EHLO, 2 MAIL FROM, and 3 RCPT TO commands...

IMC SMTP EHLO Buffer Overrun

A security vulnerability results because of an unchecked buffer in the IMC code that generates the response to the EHLO protocol command. If the buffer were overrun with data it would result in either the failure of the IMC or could allow the attacker to run code in the security context of the IM...

IMC SMTP EHLO Buffer Overrun

A security vulnerability results because of an unchecked buffer in the IMC code that generates the response to the EHLO protocol command. SPDX-FileCopyrightText: 2002 SECNAP Network Security, LLC Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2005-1013

The SMTP service in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to cause a denial of service server crash via an EHLO command with a Unicode string...