CVE-2002-1415: Undefined Security Weakness

Format string vulnerability in SMTP service for WebEasyMail 3.4.2.2 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format strings in SMTP requests...

Sendmail 8.12.x - Header Processing Buffer Overflow (1)

Sendmail 8.12.x - Header Processing Buffer Overflow 1 // source: https://www.securityfocus.com/bid/6991/info Sendmail is prone to a remotely buffer-overflow vulnerability in the SMTP header parsing component. Successful attackers may exploit this vulnerability to gain control of affected servers...

Sendmail 8.12.x - Header Processing Buffer Overflow (2)

Sendmail 8.12.x - Header Processing Buffer Overflow 2 // source: https://www.securityfocus.com/bid/6991/info Sendmail is prone to a remotely buffer-overflow vulnerability in the SMTP header parsing component. Successful attackers may exploit this vulnerability to gain control of affected servers...

Microsoft Windows SMTP Service NTLM Null Session Authorization Bypass (uncredentialed check)

It is possible to authenticate to the remote SMTP service by logging in with a NULL session. An attacker may use this flaw to use your SMTP server as a spam relay. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11308; scriptversion"1.29"; scriptcvsdate"Date: 2018/11/...

Sendmail 8.12.x - Header Processing Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/6991/info Sendmail is prone to a remotely buffer-overflow vulnerability in the SMTP header parsing component. Successful attackers may exploit this vulnerability to gain control of affected servers. Reportedly, this vulnerability may be locally...

ISMAIL (All Versions) Remote Buffer Overrun

NGSSoftware Insight Security Research Advisory Name: ISMAIL v 1.25 & v 1.4.3 Remote Buffer Overrun Systems Affected: WinNT, Win2K, XP Severity: High Risk Category: Remote Buffer Overrun Vendor URL: http://instantservers.com/ismail.html Author: Mark Litchfield [email protected] Date: 27th...

ISMAIL buffer overflow

Buffer overflow in SMTP MAIL FROM: and RCPT TO:...

ISMail Multiple Command Domain Name Handling Remote Overflow

The remote SMTP server probably ISMail seems to be vulnerable to a buffer overflow which could allow an attacker to gain LOCALSYSTEM privileges on this host. C Tenable Network Security, Inc. Ref: Message-ID: Date: Thu, 27 Feb 2003 15:45:17 -0800 From: "NGSSoftware Insight Security Research" To: ,...

Multiple Anti-Virus SMTP Message Long Line Parsing DoS

Some antivirus scanners die when they process an email with a long string without line breaks. Such a message was sent. If there is an antivirus on your MTA, it might have crashed. Please check its status right now, as it is not possible to do it remotely C Tenable Network Security, Inc. Credits:...

EType EServ 2.9x - SMTP Remote Denial of Service

EType EServ 2.9x - SMTP Remote Denial of Service source: https://www.securityfocus.com/bid/6521/info EServ is a proxy software package distributed by EType. It is available for Microsoft Windows operating systems. It has been reported that a problem in EServ may cause the software to crash. When ...

EType EServ 2.9x - SMTP Remote Denial of Service

source: https://www.securityfocus.com/bid/6521/info EServ is a proxy software package distributed by EType. It is available for Microsoft Windows operating systems. It has been reported that a problem in EServ may cause the software to crash. When a remote user sends a large amount of data via...

CVE-2002-2080

Floositek FTGate PRO 1.05 allows remote attackers to cause a denial of service memory and CPU consumption via a large number of RCPT TO: messages during an SMTP session...

CVE-2002-2121

SurfControl SuperScout Email filter for SMTP 3.5.1 allows remote attackers to cause a denial of service crash via a long SMTP 1 HELO or 2 RCPT TO command, possibly due to a buffer overflow...

CVE-2002-1790

The SMTP service in Microsoft Internet Information Services IIS 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and send spam or spoofed messages via encapsulated SMTP addresses, a similar vulnerability to CVE-1999-0682...

INwebMailServer.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 - -- INweb Mail Server v2.01 Denial of Service Vulnerability -- - -- Type Denial of Service - -- Release Date November 12, 2002 - -- Product / Vendor The INweb Mail Server is a standard Internet POP3 and SMTP mail server that runs flawlessly under...

smartmail.dos.pl

hi SmartMail Server http://www.virtualzone.de/smartmail/is a full featured E-Mail Server. It can be run on any 32Bit compatible Microsoft Windows machine and complies with the standards of SMTP, POP3 and HTTP Webinterface. SmartMail proposes two version of SmartMail server, I found that two...

SmartMail server DOS

hi SmartMail Server http://www.virtualzone.de/smartmail/is a full featured E-Mail Server. It can be run on any 32Bit compatible Microsoft Windows machine and complies with the standards of SMTP, POP3 and HTTP Webinterface. SmartMail proposes two version of SmartMail server, I found that two...

CVE-2002-1061

Multiple buffer overflows in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allow remote attackers to cause a denial of service and possibly execute arbitrary code via 1 an HTTP GET request with a long major version number, 2 an HTTP GET request to the HTTP proxy on port 3128...

Microsoft Windows SMTP Service fails to properly handle responses from the NTLM authentication layer

Overview A flaw in the authentication code of the SMTP service provided with Windows 2000 server and Exchange 5.5 may allow a user access to the SMTP service. This acess could be used to relay mail in violation of the SMTP server's security policy, or consume CPU resources on the SMTP server...

CVE-2002-1121

SMTP content filter engines, including 1 GFI MailSecurity for Exchange/SMTP before 7.2, 2 InterScan VirusWall before 3.52 build 1494, 3 the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046 "Message Fragmentation an...