Cisco PIX Firewall (smtp content filtering hack)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 How to escape "fixup smtp" of Cisco Pix Firewall: The Cisco Pix Firewall normally restrict some protocol commandhttp,ftp,smtp and manage multisession protocolh323, ftp,sqlnet . I made some test on a BSDI3.0 running sendmail9 placed in the dmz . The Pi...

Cisco PIX Firewall 4.x5.x - SMTP Content Filtering Evasion

Cisco PIX Firewall 4.x5.x - SMTP Content Filtering Evasion source: https://www.securityfocus.com/bid/1698/info Like other firewalls, the Cisco PIX Firewall implements technology that reads the contents of packets passing through it for application-level filtering. In the case of SMTP, it can be...

Cisco PIX Firewall 4.x/5.x - SMTP Content Filtering Evasion

source: https://www.securityfocus.com/bid/1698/info Like other firewalls, the Cisco PIX Firewall implements technology that reads the contents of packets passing through it for application-level filtering. In the case of SMTP, it can be configured so only certain smtp commands can be allowed...

Дырка в Internet Shopper Mail Service

Исопльзуя ; в SMTP-команде From: можно исопльзовать сервер в качестве открытого релея...

Переполнение буфера в WinSMTP

Переполнение буфера при длинном SMTP-HELO...

Jack De Winter WinSMTP 1.6 f2.0 - Buffer Overflow

Jack De Winter WinSMTP 1.6 f2.0 - Buffer Overflow source: https://www.securityfocus.com/bid/1680/info A number of unchecked buffers exist in the SMTP and POP3 components of Jack De Winter's WinSMTP mail daemon which could lead to denial of service attacks or arbitrary code execution, depending on...

Jack De Winter WinSMTP 1.6 f/2.0 - Buffer Overflow

source: https://www.securityfocus.com/bid/1680/info A number of unchecked buffers exist in the SMTP and POP3 components of Jack De Winter's WinSMTP mail daemon which could lead to denial of service attacks or arbitrary code execution, depending on the data entered. Sending a HELO command consisti...

WebShield SMTP infinite loop DoS Attack

Description: A DoS attack is very easy to implement on most WebShield SMTP setups. Sending E-mail with a "From: " address that includes a period after the domain name will cause an infinite loop using up resources until the server will finally crash. When restarted, the machine will continue to...

CVE-2000-0657

Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long HELO command in the SMTP protocol...

CVE-2000-0657

The vulnerability CVE-2000-0657 affects AnalogX Proxy Server versions 4.04 and earlier. It is a buffer overflow triggered by a long HELO command in SMTP, leading to a remote-denial of service. The provided documents do not include a remediation or a confirmed exploit status. No further technical ...

CVE-2000-0657: Undefined Security Weakness

Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long HELO command in the SMTP protocol...

CVE-2000-0657

Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long HELO command in the SMTP protocol...

AnalogX Proxy 4.0 4 - Denial of Service

AnalogX Proxy 4.0 4 - Denial of Service // source: https://www.securityfocus.com/bid/1504/info AnalogX Proxy is a simple proxy server that allows a user to connect a network of computers to the internet through the proxy gateway. Many of the services provided contain buffer overrun vulnerabilitie...

AnalogX Proxy 4.0 4 - Denial of Service

// source: https://www.securityfocus.com/bid/1504/info AnalogX Proxy is a simple proxy server that allows a user to connect a network of computers to the internet through the proxy gateway. Many of the services provided contain buffer overrun vulnerabilities that can allow an attacker to crash th...

CVE-2000-0428

CVE-2000-0428 : Buffer overflow in the SMTP gateway of InterScan Virus Wall versions 3.32 and earlier allows remote command execution via a long filename in a uuencoded attachment. Impact is consistent with a HIGH severity (CVSS 2.0: AV:N/AC:L/Au:N/C:C/I:C/A:C). No remediation details are provide...

CVE-2000-0428: Undefined Security Weakness

Buffer overflow in the SMTP gateway for InterScan Virus Wall 3.32 and earlier allows a remote attacker to execute arbitrary commands via a long filename for a uuencoded attachment...

Проблемы с SMTP-прокси

Многие SMTP-прокси сервера используемые в качестве брандмауэров позволяют обойти защиту SMTP-Сервера с помощью команды DATA, расположенной до RCPT:. В таком случае все команды следующие далее будут восприниматься как данные и не будут проверяться...

Out of order SMTP DATA commands incorrectly allow pass-through mode in some firewall smtp filters/proxies

Hi people, Issue: Out of order SMTP DATA commands incorrectly allow pass-through mode in some firewall smtp filters/proxies. I first found this sometime in 1996 can't remember exact date- long time ago : , and notified the relevant firewall vendor. After about 4 generations it's still not fixed i...

SX-20000620-3

FSC Internet Corp. / SecureXpert Labs SecureXpert Labs Advisory SX-20000620-3 - Partial Denial of Service in Check Point Firewall-1 on Windows NT Summary The SMTP Security Server component of Check Point Firewall-1 4.0 and 4.1 is vulnerable to a simple network-based attack which raises the firewa...

ITHouse Mail Server v1.04 To: Field Handling Overflow

The remote SMTP server is ITHouse Mail Server. Versions 1.04 or earlier of this server are vulnerable to a buffer overrun which happens during the delivery routine of the mails if an attacker has sent a message with a too long 'To:' field. An attacker may use this flaw to execute arbitrary code o...