MS SMTP NULL Session Mail Relay

Binary data 2040.prm...

SUSE-SA:2003:0012: hypermail

The remote host is missing the patch for the advisory SUSE-SA:2003:0012 hypermail. Hypermail is a tool to convert a Unix mail-box file to a set of cross- referenced HTML documents. During an internal source code review done by Thomas Biege several bugs where found in hypermail and its tools. Thes...

[NT] ignitionServer Server Linking Password Verification Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2004-0156

Format string vulnerabilities in the 1 die or 2 logevent functions for ssmtp before 2.50.6 allow remote mail relays to cause a denial of service and possibly execute arbitrary code...

DSA-485 ssmtp - format string

Bulletin has no description...

[SECURITY] [DSA 437-1] New cgiemail packages fix open mail relaying

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 437-1 [email protected] http://www.debian.org/security/ Matt Zimmerman February 11th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 437-1] New cgiemail packages fix open mail relaying

-------------------------------------------------------------------------- Debian Security Advisory DSA 437-1 [email protected] http://www.debian.org/security/ Matt Zimmerman February 11th, 2004 http://www.debian.org/security/faq -...

DSA-437 cgiemail - open mail relay

Bulletin has no description...

CVE-2003-0979

FreeScripts VisitorBook LE visitorbook.pl does not properly escape line breaks in input, which allows remote attackers to 1 use VisitorBook as an open mail relay, when $mailuser is 1, via extra headers in the email field, or 2 cause the guestbook database to be deleted via a large number of line...

CVE-2003-0979

Vulnerability overview (CVE-2003-0979) FreeScripts VisitorBook LE (visitorbook.pl) fails to properly escape line breaks in user input. This can allow remote attackers to abuse the script as an open mail relay when $mailuser is 1 (via extra headers in the email field) and to trash the guestbook da...

CVE-2003-0979

FreeScripts VisitorBook LE visitorbook.pl does not properly escape line breaks in input, which allows remote attackers to 1 use VisitorBook as an open mail relay, when $mailuser is 1, via extra headers in the email field, or 2 cause the guestbook database to be deleted via a large number of line...

Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)

Westpoint Security Advisory Title: VisitorBook LE Mail Relay and Cross Site Scripting Risk Rating: Moderate Software: FreeScripts VisitorBook LE Platforms: Most Unix Vendor URL: http://www.freescripts.com/ Author: Paul Johnston [email protected] Date: 10th December 2003 Advisory ID: wp-03-000...

DEBIAN-CVE-2003-0864

Buffer overflow in mjoin in channel.c for IRCnet IRCD 2.10.x to 2.10.3p3 allows remote attackers to cause a denial of service...

MTA Open Mail Relaying Allowed (thorough test)

Nessus has detected that the remote SMTP server is insufficiently protected against mail relaying. This issue allows any spammer to use your mail server to send their mail to the world, thus flooding your network bandwidth and possibly getting your mail server blacklisted. C Tenable Network...

Mambo Site Server 4.0.14 - 'contact.php' Unauthorized Mail Relay

source: https://www.securityfocus.com/bid/8647/info It has been reported that Mambo Open Source Server is prone to multiple input validation vulnerabilities that may allow remote attackers to inject malicious SQL syntax into database queries and send anonymous e-mail to arbitrary users. The...

Mambo Site Server 4.0.14 - contact.php Unauthorized Mail Relay

Mambo Site Server 4.0.14 - contact.php Unauthorized Mail Relay source: https://www.securityfocus.com/bid/8647/info It has been reported that Mambo Open Source Server is prone to multiple input validation vulnerabilities that may allow remote attackers to inject malicious SQL syntax into database...

Cacheflow CacheOS 4.1.10016 - HTTP HOST Proxy

Cacheflow CacheOS 4.1.10016 - HTTP HOST Proxy source: https://www.securityfocus.com/bid/8584/info Malicious HTTP HOST header field can be used on CacheOS to tunnel arbitrary TCP connections through a HTTP request. It has been reported that CacheFlow CacheOS may allow the misuse of the HOST header...

Cacheflow CacheOS 4.1.10016 - HTTP HOST Proxy

source: https://www.securityfocus.com/bid/8584/info Malicious HTTP HOST header field can be used on CacheOS to tunnel arbitrary TCP connections through a HTTP request. It has been reported that CacheFlow CacheOS may allow the misuse of the HOST header value. This may provide for the use of an...

IBM AIX sendmail configured as open mail relay by default

Overview Sendmail shipped with IBM AIX is configured by default as an open mail relay. Unauthenticated, remote users can route mail through such a system. Description Sendmail is a widely used mail transfer agent MTA that is included with IBM AIX. According to IBM:The default configuration files...

CVE-2003-0285

IBM AIX 5.2 and earlier distributes Sendmail with a configuration file sendmail.cf with the 1 promiscuousrelay, 2 acceptunresolvabledomains, and 3 acceptunqualifiedsenders features enabled, which allows Sendmail to be used as an open mail relay for sending spam e-mail...