119 matches found
CVE-2005-1515
Integer signedness error in the qmailput and substdioput functions in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large number of SMTP RCPT TO commands...
Youngzsoft CMailServer < 4.0.2003.03.30 RCPT TO Overflow
Binary data 2042.prm...
Zone Labs desktop security products fail to properly validate RCPT TO command argument
Overview Zone Labs desktop security products contains a buffer overflow in the code that processes the RCPT TO command argument. This could allow an attacker to execute arbitrary code with SYSTEM privileges. Description Zone Labs offers a suite of desktop security products. These products provide...
DEBIAN-CVE-2003-0540
The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service lock via 1 a malformed envelope address to a local host that would generate a bounce and contains the ".!" string in the MAIL FROM or Errors-To headers, which causes nqmgr to lock up, or 2 v...
ISMAIL buffer overflow
Buffer overflow in SMTP MAIL FROM: and RCPT TO:...
Buffer overflow in Novell GroupWise
Buffer overflow in RCPT SMTP command...
CVE-1999-0418
Denial of service in SMTP applications such as Sendmail, when a remote attacker e.g. spammer uses many "RCPT TO" commands in the same connection...
CVE-1999-0418
CVE-1999-0418 is a denial-of-service issue in SMTP applications (notably Sendmail) where a remote attacker floods a connection with many RCPT TO commands. The underlying effect is resource exhaustion leading to service disruption. Documents confirm the vulnerability and its generic impact but do ...
CVE-1999-1532
Netscape Messaging Server 3.54, 3.55, and 3.6 allows a remote attacker to cause a denial of service memory exhaustion via a series of long RCPT TO commands...
CVE-2001-0260
Buffer overflow in Lotus Domino Mail Server (Lotus Domino R5 SMTP server) versions 5.0.5 and earlier can be triggered by a long RCPT TO command, allowing a remote attacker to crash the server or execute arbitrary code. The vulnerability affects Domino R5 SMTP server with domain restrictions enabl...
Avirt Mail 4.04.2 - Mail From: Rcpt to: Denial of Service
Avirt Mail 4.04.2 - Mail From: Rcpt to: Denial of Service // source: https://www.securityfocus.com/bid/1825/info Due to insufficient bounds checking in the code that handles the fields 'MAIL FROM:' and 'RCPT TO:', it is possible to remotely crash Avirt Mail. Entering over 272 characters into the...
CVE-1999-0203
In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "rcpt to" address that would cause the mail to bounce to a program...
CVE-1999-0144
CVE-1999-0144 describes a denial-of-service in Qmail caused by issuing an RCPT command with a large number of recipients. The Red Hat, CVE, and NVD records concur this is a DoS condition related to RCPT handling, with impact to availability. The connected documents provided do not include concret...
Avirt Gateway Suite 3.33.3 a3.5 - Directory Creation
Avirt Gateway Suite 3.33.3 a3.5 - Directory Creation source: https://www.securityfocus.com/bid/764/info The aVirt Mail Server has a weakness in the code that handles the RCPT TO command. By specifying a path in the command instead of an email recipient , an attacker could cause the mail server to...
Avirt Gateway Suite 3.3/3.3 a/3.5 - Directory Creation
source: https://www.securityfocus.com/bid/764/info The aVirt Mail Server has a weakness in the code that handles the RCPT TO command. By specifying a path in the command instead of an email recipient , an attacker could cause the mail server to create a directory in the server's local filesystem...
Netscape Messaging Server 3.63.543.55 - RCPT TO Denial of Service
Netscape Messaging Server 3.63.543.55 - RCPT TO Denial of Service // source: https://www.securityfocus.com/bid/748/info Netscape Messaging server will not de-allocate memory that is used to store the RCPT TO information for an incoming email. By sending enough long RCPT TO addresses, the system c...
Netscape Messaging Server 3.6/3.54/3.55 - 'RCPT TO' Denial of Service
// source: https://www.securityfocus.com/bid/748/info Netscape Messaging server will not de-allocate memory that is used to store the RCPT TO information for an incoming email. By sending enough long RCPT TO addresses, the system can be forced to consume all available memory, leading to a denial ...
