267 matches found
SMTP too long line
Some antivirus scanners dies when they process an email with a too long string without line breaks. Such a message was sent. If there is an antivirus on your MTA, it might have crashed. Please check its status right now, as it is not possible to do it remotely. SPDX-FileCopyrightText: 2003 Michel...
exim security update
CentOS Errata and Security Advisory CESA-2005:358 Updated exim packages that fix a security issue in PCRE and a free space computation on large file system bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security...
[Full-disclosure] Secunia Research: SqWebMail Conditional Comments Script Insertion Vulnerability
====================================================================== Secunia Research 06/09/2005 - SqWebMail Conditional Comments Script Insertion Vulnerability - ====================================================================== Table of Contents Affected...
Low: Red Hat Security Advisory: postfix security update
Updated postfix packages that include a security fix and two other bug fixes are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team Postfix is a Mail Transport Agent MTA, supporting LDAP, SMTP AUTH SASL, and...
CVE-2002-0985
CVE-2002-0985 : Argument injection vulnerability in PHP 4.x mail() up to 4.2.2 may bypass safe_mode and alter the MTA command-line arguments (e.g., the 5th argument), potentially changing MTA behavior and enabling command execution. OpenVAS and Debian advisories confirm the issue affects PHP4.x a...
CVE-2002-0985
Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to bypass safe mode restrictions and modify command line arguments to the MTA e.g. sendmail in the 5th argument to mail, altering MTA behavior and possibly executing commands...
SUSE-SA:2003:013: sendmail, sendmail-tls
The remote host is missing the patch for the advisory SUSE-SA:2003:013 sendmail, sendmail-tls. sendmail is the most widely used mail transport agent MTA in the internet. A remotely exploitable buffer overflow has been found in all versions of sendmail that come with SUSE products. These versions...
SUSE-SA:2003:033: postfix
The remote host is missing the patch for the advisory SUSE-SA:2003:033 postfix. Postfix is a flexible MTA replacement for sendmail. Michal Zalewski has reported problems in postfix which can lead to a remote DoS attack or allow attackers to bounce-scan private networks. These problems have been...
SUSE-SA:2003:040: sendmail, sendmail-tls
The remote host is missing the patch for the advisory SUSE-SA:2003:040 sendmail, sendmail-tls. sendmail is the most widely used mail transport agent MTA in the internet. A remotely exploitable buffer overflow has been found in all versions of sendmail that come with SUSE products. These versions...
Isoqlog-2.2-Beta buffer overflow
+----- Software -----+ Isoqlog is an MTA log analysis program written in C . it designed to scan qmail, postfix, sendmail, exim logfile and produce usage statistics in HTML format. for viewing through a browser. It produces Top domains output according to Incoming , Outgoing , total mails and...
Multiple remote buffer overflow vulnerabilities in Courier
Background Courier MTA is a multiprotocol mail server suite that provides webmail, mailing lists, IMAP, and POP3 services. Courier-IMAP is a standalone server that gives IMAP access to local mailboxes. Description The vulnerabilities have been found in the 'SHIFTJIS' converter in 'shiftjis.c' and...
Courier < 0.45 Multiple Remote Overflows
According to its version number, the version of Courier MTA running on the remote host has multiple buffer overflow vulnerabilities. A remote attacker could exploit this to crash the service, or possibly execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...
Extremail Security Problem
Extremail Security Problem Extremail 1.5.9 www.extremail.com MTA If account is created with only digit password or password begins with digit - login is processing with any digit password or without password. -------------------- Andrey Smirnov [email protected] Russia Moscow...
CVE-2002-0914
Technical details (affected product/version, root cause, impact, fixes) are not publicly provided in the supplied documents. Please monitor for updates.
CVE-2002-0914
Double Precision Courier e-mail MTA allows remote attackers to cause a denial of service CPU consumption via a message with an extremely large or negative value for the year, which causes a tight loop...
CVE-2002-0914
Double Precision Courier e-mail MTA allows remote attackers to cause a denial of service CPU consumption via a message with an extremely large or negative value for the year, which causes a tight loop...
(RHSA-2002:214) php security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP server. The mail function in PHP 4.x to 4.2.2 may allow local script authors to bypass safe mode restrictions and modify command line arguments to the MTA such as sendmail in the 5th argument to mail, altering MTA...
CVE-2002-0914
Double Precision Courier e-mail MTA allows remote attackers to cause a denial of service CPU consumption via a message with an extremely large or negative value for the year, which causes a tight loop...
CVE-2001-0442
The CVE-2001-0442 entry concerns a buffer overflow in the Mercury MTA POP3 server for NetWare 1.48 and earlier. The vulnerability arises from handling a long APOP command, enabling remote attackers to cause a denial of service and potentially execute arbitrary code. The available connected source...