GLSA-201601-04 : OpenSMTPD: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201601-04 OpenSMTPD: Multiple vulnerabilities Multiple vulnerabilities have been discovered in OpenSMTPD. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary...

[SECURITY] Fedora 23 Update: opensmtpd-5.7.3p1-1.fc23

OpenSMTPD is a FREE implementation of the server-side SMTP protocol as defi ned by RFC 5321, with some additional standard extensions. It allows ordinary machines to exchange e-mails with other systems speaking the SMTP protocol. Started out of dissatisfaction with other implementations, OpenSMTP...

OpenSMTPD 'filter.c' Stack Buffer Overflow Vulnerability

OpenSMTPD is a free server-side implementation of the SMTP protocol. OpenSMTPD suffers from a buffer overflow vulnerability that could be exploited by a remote attacker to submit a special request to crash an application or execute arbitrary code...

OpenSMTPD Information Disclosure Vulnerability

OpenSMTPD is a free server-side implementation of the SMTP protocol. OpenSMTPD suffers from a security vulnerability that allows remote attackers to exploit the vulnerability to submit special requests to obtain sensitive information...

OpenSMTPD has multiple vulnerabilities

OpenSMTPD is a free server-side implementation of the SMTP protocol. OpenSMTPD suffers from stack overflow, memory corruption, and symbolic link attack vulnerabilities that could be exploited by remote attackers to submit a special request for a denial-of-service attack, crash an application, or...

OpenSMTPD Memory Corruption Vulnerability

OpenSMTPD is a free server-side implementation of the SMTP protocol. OpenSMTPD suffers from a memory corruption vulnerability that allows remote attackers to exploit the vulnerability to submit special requests for denial of service attacks...

OpenSMTPD after the release of the heavy interest with vulnerability-vulnerability warning-the black bar safety net

Affected system: opensmtpd opensmtpd Description: -------------------------------------------------------------------------------- CVECAN ID: CVE-2 0 1 5-7 6 8 7 OpenSMTPD is an RFC 5 3 2 1 definition of server-side SMTP Protocol is free to implement. OpenSMTPD in PROCLKA achieve on there after...

OpenSMTPD Memory Misreference Vulnerability

OpenSMTPD is a free implementation of the server-side SMTP protocol defined in RFC 5321. OpenSMTPD suffers from a memory misreference vulnerability in the PROCLKA implementation. A remote attacker could exploit this vulnerability to remotely execute arbitrary code...

[SECURITY] Fedora 22 Update: opensmtpd-5.7.3p1-1.fc22

OpenSMTPD is a FREE implementation of the server-side SMTP protocol as defi ned by RFC 5321, with some additional standard extensions. It allows ordinary machines to exchange e-mails with other systems speaking the SMTP protocol. Started out of dissatisfaction with other implementations, OpenSMTP...

Qualys Security Advisory - LibreSSL (CVE-2015-5333 and CVE-2015-5334)

Qualys Security Advisory LibreSSL CVE-2015-5333 and CVE-2015-5334 ======================================================================== Contents ======================================================================== Summary Memory Leak CVE-2015-5333 Buffer Overflow CVE-2015-5334...

OpenSMTPD multiple security vulnerabilities

DoS conditions, information disclosure, multiple memory corruptions...

Qualys Security Advisory - OpenSMTPD Audit Report

Sorry for the "CVE-2015-ABCD" place-holders in the report, but OpenSMTPD's developers were ready with the patches before MITRE was ready with the CVE-IDs. Qualys Security Advisory OpenSMTPD Audit Report ======================================================================== Contents...

opensmtpd: multiple issues

an oversight in the portable version of fgetln that allows attackers to read and write out-of-bounds memory - multiple denial-of-service vulnerabilities that allow local users to kill or hang OpenSMTPD - a stack-based buffer overflow that allows local users to crash OpenSMTPD, or execute...

FreeBSD : OpenSMTPD -- multiple vulnerabilities (42852f72-6bd3-11e5-9909-002590263bf5)

OpenSMTPD developers report : fix an mda buffer truncation bug which allows a user to create forward files that pass session checks but fail delivery later down the chain, within the user mda fix remote buffer overflow in unprivileged pony process reworked offline enqueue to better protect agains...

OpenSMTPD Remotely triggerable buffer overflow Vulnerability

Exploit for openbsd platform in category remote exploits I'm passing the gauntlet for anyone who wants to analyze this for impact etc. There's a remotely triggerable buffer overflow in OpenBSD's OpenSMTPD -- the latest version, 5.7.2 -- reachable by sending messages with huge header lines. Qualys...

FreeBSD : OpenSMTPD -- multiple vulnerabilities (ee7bdf7f-11bb-4eea-b054-c692ab848c20)

OpenSMTPD developers report : an oversight in the portable version of fgetln that allows attackers to read and write out-of-bounds memory multiple denial-of-service vulnerabilities that allow local users to kill or hang OpenSMTPD a stack-based buffer overflow that allows local users to crash...

OpenSMTPD -- multiple vulnerabilities

OpenSMTPD developers report: fix an mda buffer truncation bug which allows a user to create forward files that pass session checks but fail delivery later down the chain, within the user mda fix remote buffer overflow in unprivileged pony process reworked offline enqueue to better protect against...

OpenSMTPD -- multiple vulnerabilities

OpenSMTPD developers report: an oversight in the portable version of fgetln that allows attackers to read and write out-of-bounds memory multiple denial-of-service vulnerabilities that allow local users to kill or hang OpenSMTPD a stack-based buffer overflow that allows local users to crash...

CVE-2013-2125

OpenSMTPD before 5.3.2 does not properly handle SSL sessions, which allows remote attackers to cause a denial of service connection blocking by keeping a connection open...

CVE-2013-2125

OpenSMTPD is affected when running versions before 5.3.2, where SSL session handling allows remote attackers to cause a denial of service by keeping a TLS connection open, leading to connection blocking. The issue is confirmed across multiple sources (OpenSMTPD/OpenVAS listing and CVE-2013-2125 r...