5899 matches found
Exim < 4.76 dkim_exim_verify_finish() DKIM-Signature Header Format String
Based on its response to a specially formatted mail message, the Exim mail server listening on this port appears to be affected by a format string vulnerability. The vulnerability is due to a failure in the dkimeximverifyfinish function to properly sanitize format string specifiers in the...
Security fix for the ALT Linux 5 package postfix version 1:2.5.13-alt1
May 9, 2011 Dmitry V. Levin 1:2.5.13-alt1 - Updated to 2.5.13 fixes CVE-2011-1720 in SMTP server Cyrus SASL support...
Postfix -- memory corruption vulnerability
The Postfix SMTP server has a memory corruption error, when the Cyrus SASL library is used with authentication mechanisms other than PLAIN and LOGIN ANONYMOUS is not affected, but should not be used for other reasons. This memory corruption is known to result in a program crash SIGSEV...
RHEL 4 : python (RHSA-2011:0491)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0491 advisory. Python is an interpreted, interactive, object-oriented programming language. A flaw was found in the Python urllib and urllib2 libraries whe...
RHEL 5 : python (RHSA-2011:0492)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0492 advisory. - expat: buffer over-read and crash on XML with malformed UTF-8 sequences CVE-2009-3720 - Python: SMTP proxy RFC 2821 module DoS uncaught...
Multiple Products STARTTLS Plaintext Command Injection (CVE-2011-0411; CVE-2014-3556)
STARTTLS is an extension to plaintext communication protocols that offers a way to upgrade plain text communications to an encrypted TLS or SSL connection. Protocols such as SMTP and FTP can be TLS-secured with a compatible server by a client sending the STARTTLS command. A command injection...
Microsoft Collaboration Data Objects Buffer Overflow (MS05-048; CVE-2005-1987)
Microsoft Collaboration Data Objects CDO are a set of COM objects made for the IIS SMTP service and Exchange servers that provide the ability to build messaging and collaboration applications. A buffer overflow vulnerability exists in Microsoft Collaboration Data Objects. The vulnerability is...
RedHat Update for postfix RHSA-2011:0422-01
Check for the Version of postfix OpenVAS Vulnerability Test RedHat Update for postfix RHSA-2011:0422-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Rumble SMTP Server 'MAIL FROM' Command Denial of Service Vulnerability
The host is running Rumble SMTP Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbrumblesmtpsrvmailfromcmddosvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ Rumble SMTP Server 'MAIL FROM' Command Denial of Service Vulnerability Authors: Veerendra G.G Copyright...
CentOS Update for postfix CESA-2011:0422 centos4 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Rumble SMTP Server 'MAIL FROM' Command Denial of Service Vulnerability
Rumble SMTP Server is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS 4 / 5 : postfix (CESA-2011:0422)
Updated postfix packages that fix two security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...
postfix security update
CentOS Errata and Security Advisory CESA-2011:0422 Updated postfix packages that fix two security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS ba...
RHEL 4 / 5 : postfix (RHSA-2011:0422)
The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0422 advisory. - postfix improper mailbox permissions CVE-2008-2937 - postfix: SMTP commands injection during plaintext to TLS session switch...
Moderate: Red Hat Security Advisory: postfix security update
Updated postfix packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
postfix: SMTP commands injection during plaintext to TLS session switch
The STARTTLS implementation in Postfix 2.4.x before 2.4.16, 2.5.x before 2.5.12, 2.6.x before 2.6.9, and 2.7.x before 2.7.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is...
postfix: SMTP commands injection during plaintext to TLS session switch
The STARTTLS implementation in Postfix 2.4.x before 2.4.16, 2.5.x before 2.5.12, 2.6.x before 2.6.9, and 2.7.x before 2.7.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is...
Fedora Update for postfix FEDORA-2011-3394
Check for the Version of postfix OpenVAS Vulnerability Test Fedora Update for postfix FEDORA-2011-3394 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
