Inetserv 3.23 - SMTP Denial of Service

!/usr/bin/python Exploit Title: Inetserv 3.23 SMTP DoS Date: 1/22/2011 Author: G13 Software Link: http://www.avtronics.net/inetserv.php Version: 3.23 Tested on: WinXP SP0 Eng import socket s = socket.socketsocket.AFINET, socket.SOCKSTREAM buffer = "EXPN " + "%s" 40 + "\r\n" s.connect'127.0.0.1',2...

smtp-enum-users NSE Script

Attempts to enumerate the users on a SMTP server by issuing the VRFY, EXPN or RCPT TO commands. The goal of this script is to discover all the user accounts in the remote system. The script will output the list of user names that were found. The script will stop querying the SMTP server if...

EXPN Command Information Disclosure

Binary data 2023.prm...

CVE-2001-0280

Buffer overflow in MERCUR SMTP server 3.30 allows remote attackers to execute arbitrary commands via a long EXPN command...

CVE-2001-0280

CVE-2001-0280 : The MERCUR SMTP server 3.30 contains a buffer overflow in the handling of the EXPN command that remote attackers can trigger with a long argument to execute arbitrary commands. The vulnerability is documented in CVE/NVD entries and corroborated by Nessus plugin notes, which descri...

CVE-2001-0280

Buffer overflow in MERCUR SMTP server 3.30 allows remote attackers to execute arbitrary commands via a long EXPN command...

Mercur Mailserver 3.3 buffer overflow with EXPN

By default SMTP server is installed to be run from LocalSystem account. This makes it easy to make any action on the target system if an attacker could gain control over the code execution flow of the product. Particulary, MERCUR SMTP-Service binary MCRSMTP.EXE version 3.30.3.0 suffers from buffe...

slmail3.1.txt

Date: Thu, 4 Feb 1999 13:51:32 -0800 From: Marc To: [email protected] Subject: Multiple SLMail Vulnerabilities eEye Digital Security Team www.eEye.com [email protected] February 04, 1999 Multiple SLMail Vulnerabilities Systems Affected SLMail 3.1 Release Date February 04, 1999 Advisory...

Multiple Mail Server EXPN/VRFY Information Disclosure

The remote SMTP server answers to the EXPN and/or VRFY commands. The EXPN command can be used to find the delivery address of mail aliases, or even the full name of the recipients, and the VRFY command may be used to check the validity of an account. Your mailer should not allow remote users to u...