2684 matches found
Internet Shopper Ltd's Mail Server Open relay bug.
Internet Shopper Ltd's Mail Server Open relay bug. I have been unable to make contact with Internet Shopper Ltd, and as this bug might easily be found accidently I have decide to make it public SUMMARY: Internet Shopper Ltd's Mail Server can be made to accept and handle mail for non-local sites...
Security Bulletin (MS00-059)
Microsoft Security Bulletin MS00-059 - -------------------------------------- Patch Available for "Java VM Applet" Vulnerability Originally posted: August 21, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in the Microsoftr virtual machine Microsoft V...
NetWin dMailWeb Unrestricted Mail Relay
Product: NetWin dMailWeb Type: Unrestricted Mail Relay Severity: Moderate Versions: = 2.6g: Case A All, configuration error: Case B Note: NetWin cwMail also appears vulnerable to the same attacks, and appears to be using exactly the same version numbers. --- Overview dMailWeb is a CGI application...
CVE-2000-0610
NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to bypass authentication and use the server for mail relay via a username that contains a carriage return...
Sambar Server /session/sendmail Arbitrary Mail Relay
The Sambar web server is running. It provides a web interface for sending emails. You may simply pass a POST request to /session/sendmail and by this send mails to anyone you want. Due to the fact that Sambar does not check HTTP referrers you do not need direct access to the server! %NASLMINLEVEL...
Sambar Server /cgi-bin/mailit.pl Arbitrary Mail Relay
The Sambar web server is running and the 'mailit.pl' cgi is installed. This CGI takes a POST request from any host and sends a mail to a supplied address. %NASLMINLEVEL 70300 Copyright 2000 by Hendrik Scholz Changes by Tenable: - Revised plugin title 4/2/2009 - Updated to use compat.inc, added CV...
CVE-1999-0512
CVE-1999-0512 describes a mail server that is explicitly configured to allow SMTP relaying, enabling abuse by spammers. The connected documents corroborate an open mail-relay condition detected by various scanners (Nessus/OpenVAS) and consistently reference reconfiguring the SMTP server to preven...
CVE-1999-0512
A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers...
CVE-1999-0682
The vulnerability CVE-1999-0682 affects Microsoft Exchange 5.5, allowing a remote attacker to relay email (spam) via encapsulated SMTP addresses even when anti-relaying features are enabled. Connected Red Hat entries describe IIS SMTP relaying similar issues with encapsulated SMTP addresses (CVE-...
Phorum 3.0.7 - 'violation.php3' Arbitrary Email Relay
source: https://www.securityfocus.com/bid/2272/info Phorum is a freely available, open source package originally written by Brian Moon. The package is designed to add enhanced features to a web page, allowing users to interact through bulletin board style chats forums and discussions. A problem...
Phorum 3.0.7 - violation.php3 Arbitrary Email Relay
Phorum 3.0.7 - violation.php3 Arbitrary Email Relay source: https://www.securityfocus.com/bid/2272/info Phorum is a freely available, open source package originally written by Brian Moon. The package is designed to add enhanced features to a web page, allowing users to interact through bulletin...
ntmail3relay.txt
NTMail version 3 relay problem NTmail3 appears to have a small hole that allows anyone to use an NTmail3 server as a relay mail server. Basically here is how it works. NTmail3 is set to not allow relay either the TO or FROM address must be local JUCE a $500 antispamming add-on from the makers of...
CVE-1999-0682
Microsoft Exchange 5.5 allows a remote attacker to relay email i.e. spam using encapsulated SMTP addresses, even if the anti-relaying features are enabled...
WinGate Passwordless Default Installation
Wingate is a program that allows a Windows98 computer to act as a proxy. Unfortunately, the default configuration is too permissive and allows anyone to use this computer to connect anywhere, thus hiding the real IP address. This WinGate server does not ask for any passwords, and thus can be used...
NTMail3 Arbitrary Mail Relay
Nessus has detected that the remote SMTP server allows anyone to use it as a mail relay provided that the source address is set to ''. This issue allows any spammer to use your mail server to send their mail to the world, thus flooding your network bandwidth and possibly getting your mail server...
HTTP Proxy Open Relay Detection
The remote web proxy accepts unauthenticated HTTP requests from the Nessus scanner. By routing requests through the affected proxy, a user may be able to gain some degree of anonymity while browsing websites, which will see requests as originating from the remote host itself rather than the user'...
Lotus Domino 4.6.1/4.6.4 Notes - SMTPA MTA Mail Relay
source: https://www.securityfocus.com/bid/487/info Lotus Notes SMTP MTA is susceptible to being used as a mail relay for SPAM or other unsolicited email. Connecting to the mail server tcp25 and issuing a 'mail from' command with as the data may allow an unauthorized user to relay email via this...
Lotus Domino 4.6.14.6.4 Notes - SMTPA MTA Mail Relay
Lotus Domino 4.6.14.6.4 Notes - SMTPA MTA Mail Relay source: https://www.securityfocus.com/bid/487/info Lotus Notes SMTP MTA is susceptible to being used as a mail relay for SPAM or other unsolicited email. Connecting to the mail server tcp25 and issuing a 'mail from' command with as the data may...
Gordano NTMail 3.05.0 - SPAM Relay
Gordano NTMail 3.05.0 - SPAM Relay source: https://www.securityfocus.com/bid/297/info NTMail v3.X is susceptible to being used as a mail relay for SPAM or other unsolicited email. Connecting to the mail server tcp25 and issuing a 'mail from' command with as the data will allow an unathorized user...