Microsoft IIS 4.0/5.0 - SMTP Service Encapsulated SMTP Address (MS99-027)

source: https://www.securityfocus.com/bid/5213/info Microsoft Exchange 5.5 and the SMTP Simple Mail Transfer Protocol service included with IIS Internet Information Services 4.0 and 5.0 are vulnerable to an encapsulated SMTP address vulnerability. The vulnerability was originally announced in...

SMTP settings

This plugin sets various SMTP parameters because several checks need to use a third-party host/domain name in order to work properly. The checks that rely on this are SMTP or DNS relay checks. By default, 'example.edu' is being used for this purpose. However, under some circumstances, this may le...

CVE-2001-0894

Postfix SMTP server (pre-20010228-pl07) is affected by a remote DoS: when configured to email the postmaster on SMTP errors, a storm of errors can cause the SMTP session log to grow, leading to memory exhaustion. Debian advisory DSA-093-1 and OpenVAS/NESL entries corroborate a remote DoS due to e...

CVE-2002-0002

The connected advisory confirms a format-string vulnerability in stunnel for client-mode negotiations (smtp, pop, nntp). Affected versions: 3.15 through 3.21c; 3.22 is not vulnerable. The flaw arises in the functions that implement client-side SMTP/POP/NNTP negotiations, allowing a malicious serv...

CVE-2001-0894

Vulnerability in Postfix SMTP server before 20010228-pl07, when configured to email the postmaster when SMTP errors cause the session to terminate, allows remote attackers to cause a denial of service memory exhaustion by generating a large number of SMTP errors, which forces the SMTP session log...

CVE-2002-0055

SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer BDAT request...

CVE-2002-0002

Format string vulnerability in stunnel before 3.22 when used in client mode for 1 smtp, 2 pop, or 3 nntp allows remote malicious servers to execute arbitrary code...

CVE-2001-0894: Undefined Security Weakness

Vulnerability in Postfix SMTP server before 20010228-pl07, when configured to email the postmaster when SMTP errors cause the session to terminate, allows remote attackers to cause a denial of service memory exhaustion by generating a large number of SMTP errors, which forces the SMTP session log...

CVE-2002-0002: Undefined Security Weakness

Format string vulnerability in stunnel before 3.22 when used in client mode for 1 smtp, 2 pop, or 3 nntp allows remote malicious servers to execute arbitrary code...

CVE-2002-0055: Incorrect Resource Transfer Between Spheres

SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer BDAT request...

CVE-2002-0416

CVE-2002-0416 affects SH39 MailServer versions 1.21 and earlier. A buffer overflow is triggered by a long command to the SMTP port, allowing remote attackers to cause a denial of service and potentially execute arbitrary code. The connected documents confirm the affected product and the underlyin...

CVE-2002-0432

Buffer overflow in 1 lprintf and 2 cprintf in sysdep.c of Citadel/UX 5.90 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via attacks such as a long HELO command to the SMTP server...

CVE-2002-0432

Citadel/UX 5.90 and earlier are affected by a buffer overflow in sysdep.c (functions lprintf and cprintf). The flaw can be triggered by long HELO commands sent to the SMTP server, leading to denial of service and possibly arbitrary code execution on a remote attacker. Affected product/version: Ci...

CVE-2002-0416

Buffer overflow in SH39 MailServer 1.21 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long command to the SMTP port...

CVE-2002-0416: Undefined Security Weakness

Buffer overflow in SH39 MailServer 1.21 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long command to the SMTP port...

IPSwitch IMail SMTP Multiple Vulnerabilities (OF, DoS)

A vulnerability exists within IMail that allows remote attackers to gain SYSTEM level access to servers running IMail's SMTP daemon versions 6.06 and below. The vulnerability stems from the IMail SMTP daemon not doing proper bounds checking on various input data that gets passed to the IMail...

CVE-2002-0280

Buffer overflow in CodeBlue 4 and earlier, and possibly other versions, allows remote attackers to execute arbitrary code via a long string in an SMTP reply...

CVE-2002-0309

SMTP proxy in Symantec Enterprise Firewall SEF 6.5.x includes the firewall's physical interface name and address in an SMTP protocol exchange when NAT translation is made to an address other than the firewall, which could allow remote attackers to determine certain firewall configuration...

EUVD-2002-0277

Buffer overflow in CodeBlue 4 and earlier, and possibly other versions, allows remote attackers to execute arbitrary code via a long string in an SMTP reply...

CVE-2002-0280

The connected records confirm CVE-2002-0280 affects CodeBlue 4 and earlier, with a buffer overflow that allows remote attackers to execute arbitrary code via a long string in an SMTP reply. The impact is described as remote code execution with partial confidentiality/integrity/availability impact...