CVE-2003-1477

MAILsweeper for SMTP 4.3.6 and 4.3.7 allows remote attackers to cause a denial of service CPU consumption via a PowerPoint attachment that either 1 is corrupt or 2 contains "embedded objects."...

CVE-2003-1154

MAILsweeper for SMTP 4.3 allows remote attackers to bypass virus protection via a mail message with a malformed zip attachment, as exploited by certain MIMAIL virus variants...

MDaemon WorldClient form2raw.cgi Stack Buffer Overflow

This module exploits a stack buffer overflow in Alt-N MDaemon SMTP server for versions 6.8.5 and earlier. When WorldClient HTTP server is installed default, a CGI script is provided to accept html FORM based emails and deliver via MDaemon.exe, by writing the CGI output to the Raw Queue. When...

atguard buffer overflow

Buffer overflow during incoming SMTP parsing...

CVE-2003-0714

The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service memory exhaustion by directly connecting to the SMTP service and sending a certain extended verb request, possibly triggering a buffer overflow in Exchange 2000...

CVE-2003-0852

Format string vulnerability in sendmessage.c for Sylpheed-claws 0.9.4 through 0.9.6 allows remote SMTP servers to cause a denial of service crash in sylpheed via format strings in an error message...

ms03-046.pl

On October 15th, Microsoft released an advisory stating that both Exchange 5.5 and Exchange 2000 were vulnerable to a denial of service attack in the code which processes extended verb requests. This advisory also stated that Exchange 2000 was vulnerable to a buffer overrun that would allow a...

CVE-2003-0852

Format string vulnerability in sendmessage.c for Sylpheed-claws 0.9.4 through 0.9.6 allows remote SMTP servers to cause a denial of service crash in sylpheed via format strings in an error message...

CVE-2003-0852

This CVE affects Sylpheed-claws 0.9.4–0.9.6, with a vulnerability in the send_message.c routine caused by format strings in an error message. This format-string vulnerability could be exploited by a remote SMTP server to cause a denial of service (crash) in Sylpheed. The connected documents do no...

CVE-2003-0852: Undefined Security Weakness

Format string vulnerability in sendmessage.c for Sylpheed-claws 0.9.4 through 0.9.6 allows remote SMTP servers to cause a denial of service crash in sylpheed via format strings in an error message...

[Full-Disclosure] Sylpheed-claws format string bug, yet still sylpheed much better than windows

Georgi Guninski security advisory 61, 2003 Sylpheed-claws format string bug, yet still sylpheed much better than windows Systems affected: Sylpheed-claws 0.9.6 - 0.9.4 Fixed in CVS Risk: Medium Date: 22 October 2003 Legal Notice: This Advisory is Copyright c 2003 Georgi Guninski. You may distribu...

Microsoft Exchange buffer overflow

Buffer overflow on XEXCH50 SMTP command processing...

MS03-046 Microsoft Exchange 2000 Heap Overflow

On October 15th, Microsoft released an advisory stating that both Exchange 5.5 and Exchange 2000 were vulnerable to a denial of service attack in the code which processes extended verb requests. This advisory also stated that Exchange 2000 was vulnerable to a buffer overrun that would allow a...

Sylpheed-claws format string bug

Format string bug in SMTP client code...

MS Exchange 2000 XEXCH50 Heap Overflow PoC (MS03-046)

No description provided by source. !/usr/bin/perl -w ms03-046.pl - hdm metasploit com This vulnerability allows a remote unauthenticated user to overwrite big chunks of the heap used by the inetinfo.exe process. Reliably exploiting this bug is non-trivial; even though the entire buffer is binary...

Microsoft Exchange Server 2000 - XEXCH50 Heap Overflow (PoC) (MS03-046)

!/usr/bin/perl -w ms03-046.pl - hdm metasploit com This vulnerability allows a remote unauthenticated user to overwrite big chunks of the heap used by the inetinfo.exe process. Reliably exploiting this bug is non-trivial; even though the entire buffer is binary safe even nulls and can be just abo...

CVE-2003-0714

CVE-2003-0714 affects Microsoft Exchange Server’s Internet Mail Service in Exchange Server 5.5 and Exchange 2000. The issue enables remote attackers to cause a denial of service via memory exhaustion by connecting to SMTP and issuing a specific extended verb request, with a potential buffer overf...

CVE-2003-0714: Uncontrolled Resource Consumption

The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service memory exhaustion by directly connecting to the SMTP service and sending a certain extended verb request, possibly triggering a buffer overflow in Exchange 2000...

Microsoft Exchange Server fails to properly handle specially crafted SMTP extended verb requests

Overview Microsoft Exchange fails to handle certain SMTP extended verbs correctly. In Exchange 5.5, this can lead to a denial-of-service condition. In Exchange 2000, this could permit an attacker to run arbitrary code. Description Microsoft Exchange is a popular collaboration product which includ...

Microsoft Exchange Server Buffer Overflow Vulnerability

Description Microsoft has announced that Exchange Server is affected by a remotely exploitable buffer overflow condition. The overflow can be triggered remotely by unauthenticated SMTP clients. The source of the issue appears to be in how the XEXCH50 verb is handled by the server. Microsoft has...