CVE-2007-4296

Technical details (affected software/component, root cause, impact or fix) are not publicly provided in the provided documents. Monitor for updates; current sources describe an unspecified vulnerability in assp.pl for Anti-Spam SMTP Proxy Server 1.3.3 with unknown impact.

CVE-2007-3253

Multiple unspecified vulnerabilities in Astaro Security Gateway ASG before 7.005 allow remote attackers to cause a denial of service via 1 certain email, which stops the SMTP Proxy during scanning; 2 certain HTTP traffic, which stops or slows down the HTTP proxy during HTTP responses containing...

CVE-2007-3253

The CVE-2007-3253 entry relates to Astaro Security Gateway (ASG) prior to 7.005. The documented issues are three DoS vectors: (1) email path triggering the SMTP Proxy to stop during scanning, (2) HTTP traffic causing the HTTP proxy to stop or slow during responses that include virus-scanned pages...

CVE-2007-3253

Multiple unspecified vulnerabilities in Astaro Security Gateway ASG before 7.005 allow remote attackers to cause a denial of service via 1 certain email, which stops the SMTP Proxy during scanning; 2 certain HTTP traffic, which stops or slows down the HTTP proxy during HTTP responses containing...

Anti-Spam SMTP Proxy Server未授权文件访问漏洞

Anti-Spam SMTP Proxy Server是一款反垃圾邮件SMTP代理服务器。 Anti-Spam SMTP Proxy Server不正确限制用户的访问，远程攻击者可以利用漏洞访问系统上文件获得敏感信息。 John Hanna Anti-Spam SMTP Proxy ASSP Server 1.2.3 http://assp.sourceforge.net/...

CVE-2006-4258

Absolute path traversal vulnerability in the get functionality in Anti-Spam SMTP Proxy ASSP allows remote authenticated users to read arbitrary files via 1 C:\ Windows drive letter, 2 UNC, and possibly other types of paths in the file parameter...

CVE-2006-4258

Absolute path traversal vulnerability in the get functionality in Anti-Spam SMTP Proxy ASSP allows remote authenticated users to read arbitrary files via 1 C:\ Windows drive letter, 2 UNC, and possibly other types of paths in the file parameter...

CVE-2006-4258

CVE-2006-4258 affects Anti-Spam SMTP Proxy (ASSP). The vulnerability is an absolute path traversal in the get functionality, allowing remote authenticated users to read arbitrary files via file parameter values such as C:\ or UNC paths. Documents confirm the affected component and the underlying ...

CVE-2004-2545

CVE-2004-2545 affects Secure Computing Corporation Sidewinder G2 6.1.0.01. Described as a remote denial of service of the SMTP proxy triggered by an “extremely busy network.” The embedded monitoring sub-system reportedly restarts after the failure. No remediation or concrete exploitation details ...

CVE-2004-2545

Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service SMTP proxy failure via unknown attack vendors involving an "extremely busy network." NOTE: this might not be a vulnerability because the embedded monitoring sub-system automatically restarts...

CVE-2004-2417

CVE-2004-2417 : A format string vulnerability in smtp.c for smtp.proxy 1.1.3 and earlier allows remote code execution by injecting format string specifiers via the client hostname or message-id into a syslog message. Affected: smtp.proxy before 1.1.3. Impact and remediation details are not provid...

CVE-2004-2545

Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service SMTP proxy failure via unknown attack vendors involving an "extremely busy network." NOTE: this might not be a vulnerability because the embedded monitoring sub-system automatically restarts...

smtp.proxy format string bug

syslog sender address format string bug...

CVE-2002-0309

The CVE-2002-0309 entry describes a vulnerability in Symantec Enterprise Firewall (SEF) 6.5.x where the SMTP proxy leaks the firewall’s physical interface name and address in an SMTP protocol exchange when NAT translates to an address other than the firewall. This could allow remote attackers to ...

CVE-2002-0309

SMTP proxy in Symantec Enterprise Firewall SEF 6.5.x includes the firewall's physical interface name and address in an SMTP protocol exchange when NAT translation is made to an address other than the firewall, which could allow remote attackers to determine certain firewall configuration...

CVE-2001-0692

The vulnerability CVE-2001-0692 affects WatchGuard Firebox SMTP proxy in models 2500 and 4500 running versions 4.5 and 4.6. A remote attacker can bypass firewall filtering by sending a base64 MIME email attachment whose boundary name ends with two dashes, exploiting how the SMTP proxy processes M...

CVE-2001-0692

SMTP proxy in WatchGuard Firebox 2500 and 4500 4.5 and 4.6 allows a remote attacker to bypass firewall filtering via a base64 MIME encoded email attachment whose boundary name ends in two dashes...

Out of order SMTP DATA commands incorrectly allow pass-through mode in some firewall smtp filters/proxies

Hi people, Issue: Out of order SMTP DATA commands incorrectly allow pass-through mode in some firewall smtp filters/proxies. I first found this sometime in 1996 can't remember exact date- long time ago : , and notified the relevant firewall vendor. After about 4 generations it's still not fixed i...