115 matches found
Microsoft telnet NTLM relaying
NTLM relaying attack against telnet client authentication is possible...
QMTP Open Relay
The QMTP/QMQP server that is running on this port allows relaying. Make sure it rejects connections from Internet so that it cannot be used use as an open relay. Otherwise, it may be blacklisted by RBLs or overloaded by spam. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...
[SECURITY] Fedora 9 Update: prelude-manager-0.9.14.2-2.fc9
Prelude Manager is the main program of the Prelude Hybrid IDS suite. It is a multithreaded server which handles connections from the Prelude sensors. It is able to register local or remote sensors, let the operator configure them remotely, receive alerts, and store alerts in a database or any...
Microsoft Internet Explorer multiple security vulnerabilities
Code exexuction, multiple memory corruptions, NTLM relaying...
Microsoft Windows WinHTTP servive multiple security vulnerabilities
Integer overflow, certificate spoofing, NTLM relaying...
Microsoft Windows Media Player multiple security vulnerabilities
NTLM credentials leak and relaying...
smtp-open-relay NSE Script
Attempts to relay mail by issuing a predefined combination of SMTP commands. The goal of this script is to tell if a SMTP server is vulnerable to mail relaying. An SMTP server that works as an open relay, is a email server that does not verify if the user is authorised to send email from the...
FreeBSD : spamdyke -- open relay (555ac165-2bee-11dd-bbdc-00e0815b8da8)
Spamdyke Team reports : Fixed smtpfilter to reject the DATA command if no valid recipients have been specified. Otherwise, a specific scenario could result in every spamdyke installation being used as an open relay. If the remote server connects and gives one or more recipients that are rejected...
spamdyke -- open relay
Spamdyke Team reports: Fixed smtpfilter to reject the DATA command if no valid recipients have been specified. Otherwise, a specific scenario could result in every spamdyke installation being used as an open relay. If the remote server connects and gives one or more recipients that are rejected f...
CVE-2002-2261
Sendmail 8.9.0 through 8.12.6 allows remote attackers to bypass relaying restrictions enforced by the 'checkrelay' function by spoofing a blank DNS hostname...
CVE-2002-2261
Sendmail 8.9.0 through 8.12.6 allows remote attackers to bypass relaying restrictions enforced by the 'checkrelay' function by spoofing a blank DNS hostname...
Cisco CallManager / OpenSer authentication relaying attacks
Insufficient Digest authentication validation allows active man-in-the-middle to access resources unrequested by client...
Symantec Mail Security for Domino Arbitrary Mail Relay
Symantec Mail Security for Domino, which provides antispam and anti- virus protection for Lotus Domino, is installed on the remote Windows host. The Premium Antispam feature included with the version of Symantec Mail Security for Domino on the remote host reportedly fails to recognize and reject ...
Cisco Application Velocity System TCP port relaying
Default configuration allows any TCP port to be accessed with transparent HTTP proxy request...
Simple Form Mail Relaying Vulnerability
The target is running at least one instance of Simple Form which fails to validate the parameters SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Free SMTP Server open relay
Restriction to localhost relaying only doesn't work in default configuration...
CVE-2002-1790
CVE-2002-1790 affects the SMTP service in Microsoft IIS 4.0/5.0, where the root cause is bypassing anti-relaying rules by using encapsulated SMTP addresses, enabling remote attackers to send spam or spoofed messages. This CVE is linked to the prior CVE-1999-0682 remediation lineage. The connected...
CVE-2002-1790
The SMTP service in Microsoft Internet Information Services IIS 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and send spam or spoofed messages via encapsulated SMTP addresses, a similar vulnerability to CVE-1999-0682...
CVE-2005-0337
Postfix 2.1.3, when /proc/net/ifinet6 is not available and permitmxbackup is enabled in smtpdrecipientrestrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname...
CVE-2005-0337
Postfix 2.1.3, when /proc/net/ifinet6 is not available and permitmxbackup is enabled in smtpdrecipientrestrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname...