ZoneAlarm buffer overflow

Buffer overflow on oversized RCPT TO: in SMTP...

[Full-Disclosure] Zone Labs Security Advisory ZL04-08 - SMTP processing vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Zone Labs Security Advisory ZL04-008 Zone Labs SMTP Processing Vulnerability Date Published February 18, 2004 Date Last Revised February 18, 2004 Severity Medium Overview ======== A security vulnerability exists in specific versions of ZoneAlarm,...

ASN.1 Multiple Integer Overflows (SMTP check)

The remote Windows host has an ASN.1 library with multiple integer overflow vulnerabilities. These issues could lead to a heap-based buffer overflow. A remote attacker could exploit these issues to execute arbitrary code. This particular check sent a malformed SMTP authorization packet and...

CVE-2003-1106

The SMTP service in Microsoft Windows 2000 before SP4 allows remote attackers to cause a denial of service crash or hang via an e-mail message with a malformed time stamp in the FILETIME attribute...

CVE-2003-1477

MAILsweeper for SMTP 4.3.6 and 4.3.7 allows remote attackers to cause a denial of service CPU consumption via a PowerPoint attachment that either 1 is corrupt or 2 contains "embedded objects."...

CVE-2003-1154

MAILsweeper for SMTP 4.3 allows remote attackers to bypass virus protection via a mail message with a malformed zip attachment, as exploited by certain MIMAIL virus variants...

atguard buffer overflow

Buffer overflow during incoming SMTP parsing...

CVE-2003-0714

The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service memory exhaustion by directly connecting to the SMTP service and sending a certain extended verb request, possibly triggering a buffer overflow in Exchange 2000...

CVE-2003-0852

Format string vulnerability in sendmessage.c for Sylpheed-claws 0.9.4 through 0.9.6 allows remote SMTP servers to cause a denial of service crash in sylpheed via format strings in an error message...

ms03-046.pl

On October 15th, Microsoft released an advisory stating that both Exchange 5.5 and Exchange 2000 were vulnerable to a denial of service attack in the code which processes extended verb requests. This advisory also stated that Exchange 2000 was vulnerable to a buffer overrun that would allow a...

CVE-2003-0852

This CVE affects Sylpheed-claws 0.9.4–0.9.6, with a vulnerability in the send_message.c routine caused by format strings in an error message. This format-string vulnerability could be exploited by a remote SMTP server to cause a denial of service (crash) in Sylpheed. The connected documents do no...

CVE-2003-0852

Format string vulnerability in sendmessage.c for Sylpheed-claws 0.9.4 through 0.9.6 allows remote SMTP servers to cause a denial of service crash in sylpheed via format strings in an error message...

[Full-Disclosure] Sylpheed-claws format string bug, yet still sylpheed much better than windows

Georgi Guninski security advisory 61, 2003 Sylpheed-claws format string bug, yet still sylpheed much better than windows Systems affected: Sylpheed-claws 0.9.6 - 0.9.4 Fixed in CVS Risk: Medium Date: 22 October 2003 Legal Notice: This Advisory is Copyright c 2003 Georgi Guninski. You may distribu...

Microsoft Exchange buffer overflow

Buffer overflow on XEXCH50 SMTP command processing...

MS03-046 Microsoft Exchange 2000 Heap Overflow

On October 15th, Microsoft released an advisory stating that both Exchange 5.5 and Exchange 2000 were vulnerable to a denial of service attack in the code which processes extended verb requests. This advisory also stated that Exchange 2000 was vulnerable to a buffer overrun that would allow a...

Sylpheed-claws format string bug

Format string bug in SMTP client code...

Microsoft Exchange Server 2000 - XEXCH50 Heap Overflow (PoC) (MS03-046)

!/usr/bin/perl -w ms03-046.pl - hdm metasploit com This vulnerability allows a remote unauthenticated user to overwrite big chunks of the heap used by the inetinfo.exe process. Reliably exploiting this bug is non-trivial; even though the entire buffer is binary safe even nulls and can be just abo...

MS Exchange 2000 XEXCH50 Heap Overflow PoC (MS03-046)

No description provided by source. !/usr/bin/perl -w ms03-046.pl - hdm metasploit com This vulnerability allows a remote unauthenticated user to overwrite big chunks of the heap used by the inetinfo.exe process. Reliably exploiting this bug is non-trivial; even though the entire buffer is binary...

CVE-2003-0714

CVE-2003-0714 affects Microsoft Exchange Server’s Internet Mail Service in Exchange Server 5.5 and Exchange 2000. The issue enables remote attackers to cause a denial of service via memory exhaustion by connecting to SMTP and issuing a specific extended verb request, with a potential buffer overf...

Microsoft Exchange Server fails to properly handle specially crafted SMTP extended verb requests

Overview Microsoft Exchange fails to handle certain SMTP extended verbs correctly. In Exchange 5.5, this can lead to a denial-of-service condition. In Exchange 2000, this could permit an attacker to run arbitrary code. Description Microsoft Exchange is a popular collaboration product which includ...