Data anonymiser does not blank out SMTP server username and password

SMTP server username and password are readable in database/xml export: This can possible security leak e.g. when you sent support request, where you send database export to support. Anonymizer does not remove these values. ---- Username and password should be encoded format in database...

Data anonymiser does not blank out SMTP server username and password

SMTP server username and password are readable in database/xml export: This can possible security leak e.g. when you sent support request, where you send database export to support. Anonymizer does not remove these values. ---- Username and password should be encoded format in database...

Symantec Mail Security for SMTP Message Handling Arbitrary Code Execution

Symantec Mail Security for SMTP, which provides antispam and anti- virus protection for the IIS SMTP Service, is installed on the remote Windows host. There is reportedly an issue with the version of Symantec Mail Security for SMTP on the remote host that can be triggered by messages with malform...

Symantec Mail Security for SMTP Admin Center Default Credentials

Symantec Mail Security for SMTP, which provides anti-spam and antivirus protection for the IIS SMTP Service, is installed on the remote Windows host. The installation of SMS for SMTP on the remote host uses a default username / password combination to control access to its administrative control...

CVE-2007-1252

Buffer overflow in Symantec Mail Security for SMTP 5.0 before Patch 175 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted headers in an e-mail message. NOTE: some information was obtained from third party sources...

Buffer overflow

Buffer overflow in Symantec Mail Security for SMTP 5.0 before Patch 175 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted headers in an e-mail message. NOTE: some information was obtained from third party sources...

CVE-2007-1252

Buffer overflow in Symantec Mail Security for SMTP 5.0 before Patch 175 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted headers in an e-mail message. NOTE: some information was obtained from third party sources...

CVE-2007-1252

Symantec Mail Security for SMTP (SMS for SMTP) vulnerable to a buffer overflow when processing malformed email headers in version 5.0 before Patch 175. The issue can crash the affected service and may allow arbitrary code execution. Exploitation, if achieved, would grant an attacker full control ...

CVE-2006-7038

Multiple buffer overflows in MERCUR Messaging 2005 before Service Pack 4 allow remote attackers to cause a denial of service crash via 1 "long command lines at port 32000" and 2 certain name service queries that are not properly handled by the SMTP service...

CVE-2006-7041

The SMTP service in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service infinite loop via a message in which neither the originator nor recipient address is known...

CVE-2006-7041

The CVE-2006-7041 entry concerns MERCUR Messaging 2005 before Service Pack 4, where the SMTP service is vulnerable to a denial-of-service (infinite loop) triggered by a message with neither originator nor recipient address known. Public sources (NVD/NIST) describe this as a remote DoS with CVSSv2...

CVE-2006-7038

Multiple buffer overflows in MERCUR Messaging 2005 before Service Pack 4 allow remote attackers to cause a denial of service crash via 1 "long command lines at port 32000" and 2 certain name service queries that are not properly handled by the SMTP service...

CVE-2006-7041

The SMTP service in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service infinite loop via a message in which neither the originator nor recipient address is known...

CVE-2004-2677

Format string vulnerability in qwik-smtpd.c in QwikMail SMTP qwik-smtpd 0.3 and earlier allows remote attackers to execute arbitrary code via format specifiers in the 1 clientRcptTo array, and the 2 Received and 3 messageID variables, possibly involving HELO and hostname arguments...

CVE-2004-2677

CVE-2004-2677 affects QwikMail SMTP (qwik-smtpd) version 0.3 and earlier. The flaw is a format string vulnerability in qwik-smtpd.c that allows remote attackers to achieve arbitrary code execution via format specifiers in the (1) clientRcptTo array, and the (2) Received and (3) messageID variable...

qwik-smtpd format string

Advisory : H0tTurk- Product : qwik-smtpd latest version. Vendor : http://qwikmail.sourceforge.net/ Bug : format string vulnerability Vendor Status : Released Patch. http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-0.3.patch...

Imail 8.10-8.12 (RCPT TO) Remote Buffer Overflow Exploit (meta)

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same...

Ipswitch IMail Server 8.10-8.12 - RCPT TO Remote Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

Ipswitch IMail Server 8.10-8.12 - RCPT TO Remote Buffer Overflow (Metasploit)

Ipswitch IMail Server 8.10-8.12 - RCPT TO Remote Buffer Overflow Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as...

Imail 8.10-8.12 (RCPT TO) Remote Buffer Overflow Exploit (meta)

Exploit for unknown platform in category remote exploits =============================================================== Imail 8.10-8.12 RCPT TO Remote Buffer Overflow Exploit meta =============================================================== This file is part of the Metasploit Framework and ma...