2684 matches found
IBM Tivoli Firewall Toolbox (TFST) Unspecified Remote Overflow
The remote service probably the Tivoli Relay daemon is vulnerable to a buffer overflow when it receives a long string. An attacker may use this flaw to execute arbitrary code on this host with the privilege of the user 'nobody'. C Tenable Network Security, Inc. Ref: Date: Thu, 20 Mar 2003 18:46:5...
DEBIAN-CVE-2002-2261
Sendmail 8.9.0 through 8.12.6 allows remote attackers to bypass relaying restrictions enforced by the 'checkrelay' function by spoofing a blank DNS hostname...
CVE-2002-1278
The mailconf module in Linuxconf 1.24, and other versions before 1.28, on Conectiva Linux 6.0 through 8, and possibly other distributions, generates the Sendmail configuration file sendmail.cf in a way that configures Sendmail to run as an open mail relay, which allows remote attackers to send Sp...
poprelayd & sendmail Arbitrary Mail Relay
Nessus has detected that the remote SMTP server allows relaying for users which were identified by 'POP before SMTP'. The access control mechanism is based on the POP server logs. However, it is possible to poison these logs, which means that any spammer could be using your mail server to send...
Mail relaying via IIS SMTP service
Unauthorized mail relayin then using speciall address format...
Portcullis Security Advisory - IIS Microsoft SMTP Service Encapsu lated SMTP Address Vulnerability
Portcullis Security Advisory IIS Microsoft SMTP Service Encapsulated SMTP Address Vulnerability Update to Microsoft Security Bulletin MS99-027: NT Exchange Server Encapsulated SMTP Address Vulnerability. Vulnerability discovery and development: Thomas Liam Romanis Security Testing Services Manage...
Security Advisory: Transparent Cache Engine and Content Engine TCP Relay Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: Transparent Cache Engine and Content Engine TCP Relay Vulnerability Revision 1.0: FINAL For Public Release 2002 May 15 18:00 GMT - ------------------------------------------------------------------------------- Please provide your feedba...
Transparent Cache Engine and Content Engine TCP Relay Vulnerability
...
CVE-2002-0140
Domain Name Relay Daemon dnrd 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and possibly execute arbitrary code via a long or malformed DNS reply, which is not handled properly by parsequery, getobjectname, and possibly other functions...
CVE-2002-0140
Domain Name Relay Daemon dnrd 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and possibly execute arbitrary code via a long or malformed DNS reply, which is not handled properly by parsequery, getobjectname, and possibly other functions...
Microsoft Windows SMTP Incorrect Credentials Authentication Bypass
The remote SMTP server is vulnerable to a flaw in its authentication process. This vulnerability allows any unauthorized user to successfully authenticate and use the remote SMTP server. An attacker may use this flaw to use this SMTP server as a spam relay. C Tenable Network Security, Inc. Thanks...
poprelayd and sendmail relay authentication problem (Cobalt Raq3)
Hi to all, Poprelayd is a simple script that scan /var/log/maillog for valid pop logins and updates a hash db used by sendmail to permit relaying for those valid pop users, this method is called "Pop-before-smtp". The syslog string searched by the script is in this form for the qpop server /POP...
Cobalt Raq3 PopRelayD - Arbitrary SMTP Relay
source: https://www.securityfocus.com/bid/2986/info poprelayd is a script that parses /var/log/maillog for valid pop logins, and based upon the login of a client, allows the person logged into the pop3 service to also send email from the ip address they're accessing the system with. poprelayd...
Cobalt Raq3 PopRelayD - Arbitrary SMTP Relay
Cobalt Raq3 PopRelayD - Arbitrary SMTP Relay source: https://www.securityfocus.com/bid/2986/info poprelayd is a script that parses /var/log/maillog for valid pop logins, and based upon the login of a client, allows the person logged into the pop3 service to also send email from the ip address...
Compaq web-enabled management software acts as generic proxy
Overview Remote attackers may be able to relay connections through systems running the Compaq web-enabled management software. Attackers relaying connection in this way may be able to access restricted portions of the network or disguise their identity while attacking other systems. Many Compaq...
Lotus Domino SMTP Server Allows Anonymous Relay of Quoted Addresses
Overview Lotus Domino includes an SMTP server. Under certain configurations, an intruder may be able to relay mail to third parties through the Domino SMTP server. Description An "open" mail server is one that will send mail that is not addressed to and does not originate from a local user. Open...
CVE-2001-1445
Unknown vulnerability in the SMTP server in Lotus Domino 5.0 through 5.7 allows remote attackers to bypass mail relaying restrictions via crafted e-mail addresses in "RCPT TO" commands...
CVE-2000-0610
NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to bypass authentication and use the server for mail relay via a username that contains a carriage return...
CVE-2000-0610
NetWin dMailWeb and cwMail 2.6g and earlier are affected by a vulnerability that allows remote attackers to bypass authentication and relay mail through the server by supplying a username that contains a carriage return. This entry is documented in CVE-2000-0610 with an NVD base score of 5.0 (Med...