BL4 SMTP Server < 0.1.5 - Remote Buffer Overflow (PoC)

!/usr/bin/perl use IO::Socket; use Socket; my$socket = ""; if$ARGV 2 usage if$ARGV 2 $prt = $ARGV1 else $prt = "25" ; $adr = $ARGV0; $prt = $ARGV1; $socket = IO::Socket::INET-newProto="tcp", PeerAddr=$adr, PeerPort=$prt, Reuse=1 or die "Error: cant connect to $adr:$prt\n"; print " -- Connecting T...

CVE-2006-0559

Format string vulnerability in the SMTP server for McAfee WebShield 4.5 MR2 and earlier allows remote attackers to execute arbitrary code via format strings in the domain name portion of a destination address, which are not properly handled when a bounce message is constructed...

CVE-2006-0559

Format string vulnerability in the SMTP server for McAfee WebShield 4.5 MR2 and earlier allows remote attackers to execute arbitrary code via format strings in the domain name portion of a destination address, which are not properly handled when a bounce message is constructed...

CVE-2006-0559

McAfee WebShield SMTP format-string vulnerability (CVE-2006-0559) affects McAfee WebShield SMTP prior to MR2. The flaw occurs in the bounce message construction where a format string in the original destination address can be processed unsafe, allowing an unauthenticated attacker to execute arbit...

CVE-2006-0977

Craig Morrison Mail Transport System Professional aka MTS Pro acts as an open relay when configured to relay all mail through an external SMTP server, which allows remote attackers to relay mail by connecting to the MTS Pro server, then sending a MAIL FROM that specifies a domain that is local to...

CVE-2006-0977

Craig Morrison Mail Transport System Professional aka MTS Pro acts as an open relay when configured to relay all mail through an external SMTP server, which allows remote attackers to relay mail by connecting to the MTS Pro server, then sending a MAIL FROM that specifies a domain that is local to...

mailback script exploit

There is a mailback perl cgi script that has been in use for years, originally written by Erik C. Thauvin, which has some serious sercurity holes in it. One that is currently being exploited is that the contents of the subject pass to the script from the form are not sanitized before being passed...

[SA18480] E-Post Mail Server Products Multiple Vulnerabilities

TITLE: E-Post Mail Server Products Multiple Vulnerabilities SECUNIA ADVISORY ID: SA18480 VERIFY ADVISORY: http://secunia.com/advisories/18480/ CRITICAL: Highly critical IMPACT: Security Bypass, Exposure of system information, DoS, System access WHERE: From remote SOFTWARE: E-Post Mail Server 4.x...

Ipswitch Collaboration Suite / IMail SMTPD Multiple Commands Format String

The remote host is running Ipswitch Collaboration Suite or IMail Server, commercial messaging and collaboration suites for Windows. The version of Ipswitch Collaboration Suite / IMail server installed on the remote host contains an SMTP server that suffers from a format string flaw. By supplying ...

SMTP server accepts us

This script does not perform any security test. It verifies that OpenVAS that connect to the remote SMTP server and that it can send a HELO request. OpenVAS Vulnerability Test $Id: checksmtphelo.nasl 6046 2017-04-28 09:02:54Z teissa $ Description: SMTP server accepts us Authors: Michel Arboi...

Mail relaying (thorough test)

The remote SMTP server appears to be insufficiently protected against relaying This means that spammers might be able to use your mail server to send their mails to the world. OpenVAS Vulnerability Test $Id: smtprelay2.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Mail relaying thorough te...

Check if the SMTP server accepts us

This script does not perform any security test. It verifies that the scanner is able to connect to the remote SMTP server and that it can send a HELO request. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2005-2857

Free SMTP Server 2.2 allows remote attackers to use the server as an open mail relay spam proxy...

CVE-2005-2857

Free SMTP Server 2.2 allows remote attackers to use the server as an open mail relay spam proxy...

CVE-2005-2857

CVE-2005-2857 affects Free SMTP Server 2.2 and allows remote attackers to use the server as an open mail relay (spam proxy). The vulnerability is a remote access issue enabling unauthorized relaying, leading to abuse for sending spam. The provided documents identify the affected software/version ...

Free SMTP Server Open Mail Relay Vulnerability

Secunia Advisory: SA16698 Release Date: 2005-09-05 Critical: Moderately critical Impact: Security Bypass Where: From remote Solution Status: Unpatched Software: Free SMTP Server 2.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. Description:...

Free SMTP Server <= 2.2 Spam Filter Vulnerability

Exploit for unknown platform in category remote exploits ================================================= Free SMTP Server 1 die "usage: perl $0 IP/host \nExam: perl $0 127.0.0.1 \n" ; $adr = $ARGV0; $prt = "25"; Don't changes this one $act1 = "\x48\x45\x4c\x4f $helo"; $act2 = "\x4d\x41\x49\x4c...

Free SMTP Server 2.2 - Spam Filter

!usr/bin/perl FREE SMTP Spam Filter Exploit ------------------------------------ Infam0us Gr0up - Securiti Research Info: infamous.2hell.com Vendor URL: http://www.softstack.com/ use IO::Socket; use Socket; print"\n FREE SMTP Spam Filter Exploit\n"; print" ---------------------------------\n\n";...

BusinessMail <= 4.60.00 Remote Buffer Overflow Exploit

Exploit for unknown platform in category dos / poc ====================================================== BusinessMail BusMailSMTPDOS.pl 127.0.0.1 BusinessMail email server system 4.60.00 Download: http://www.netcplus.com/ use IO::Socket; use strict; my$socket = ""; if $socket =...

CVE-2005-2387

Multiple stack-based buffer overflows in GoodTech SMTP server 5.16 allow remote attackers to execute arbitrary code via 1 a RCPT TO command with a long DNS name, or 2 a large number of RCPT TO commands with a long e-mail name arugment in the last command...