Microsoft Windows SMTP Service DNS Response Spoofing (MS10-024; CVE-2010-1690)

Microsoft Windows Simple Mail Transfer Protocol SMTP service is installed as part of Internet Information Services IIS to transfer email messages. SMTP handles how a given e-mail is transported and delivered across the Internet to the destination server. A spoofing vulnerability has been reported...

SMTP Simple Fuzzer

SMTP Simple Fuzzer This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework A Very simple Module to fuzzer some SMTP commands. It allows to respect the order or just throw everything at it.... class MetasploitModule 'SMTP Simp...

SoftiaCom wMailServer 1.0 - Remote Buffer Overflow (Metasploit)

$Id: wmailserver.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Microsoft Windows SMTP服务可预测DNS查询ID漏洞（MS10-024）

BUGTRAQ ID: 39908 CVE ID: CVE-2010-1689 Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统中的SMTP服务所生成的DNS查询中transaction ID字段值是可预测的： /----- 4FB5530C 4FB5530C loc4FB5530C: 4FB5530C mov esi+3Ch, eax 4FB5530F mov eax, ebp+arg8 4FB55312 mov ecx, ushort gwTransactionId 4FB55318 inc word ptr ushort...

Microsoft Windows SMTP服务DNS响应字段验证DNS欺骗漏洞（MS10-024）

BUGTRAQ ID: 39910 CVE ID: CVE-2010-1690 Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统中的SMTP服务没有检查从网络所接收到DNS响应的ID字段值是否实际匹配之前所发送DNS查询报文的ID字段值，恶意服务器可以通过返回伪造的查询响应执行中间人等网络欺骗攻击。 微软通过MS10-024公告中所提供的补丁修复了这个漏洞，但并没有在公告中披露这个漏洞。以下代码段显示的是补丁对 CAsyncDns::ProcessReadIO所添加的验证代码： /----- 4FB5517F 4FB5517F loc4FB5517F...

Microsoft Windows SMTP Server DNS spoofing vulnerability

The Microsoft Windows Simple Mail Transfer Protocol SMTP Server is prone to a DNS spoofing vulnerability. Successfully exploiting this issue allows remote attackers to spoof DNS replies, allowing them to redirect network traffic and to launch man-in-the-middle attacks. OpenVAS Vulnerability Test...

Microsoft Windows SMTP Server DNS spoofing vulnerability

The Microsoft Windows Simple Mail Transfer Protocol SMTP Server is prone to a DNS spoofing vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Microsoft Wndows / Microsoft Exchange SMTP Service DoS

Crash on DNS server response parsing, information leak...

TABS MailCarrier 2.51 - SMTP EHLO Overflow (Metasploit)

$Id: mailcarriersmtpehlo.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Send Recursive Archive (Mailbomb)

This script sends the Universum.zip recursive archive to the mail server. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Lotus Notes WPD Attachment Handling Buffer Overflow (CVE-2008-4564)

Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communicating with email servers over the SMTP, POP, and IMAP protocols. A stack-based buffer overflow vulnerability exists in the IBM Lotus Notes WPD. Th...

Microsoft SMTP Service and Exchange Routing Engine Buffer Overflow Vulnerability

The Microsoft Windows 2003 SMTP Service and Exchange Routing Engine is prone to a buffer overflow. This occurs during the processing responses to DNS lookups. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Microsoft SMTP Service and Exchange Routing Engine Buffer Overflow Vulnerability

The Microsoft Windows 2003 SMTP Service and Exchange Routing Engine have been reported prone to a buffer overflow. This occurs during the processing responses to DNS lookups. Successful exploitation could allow for remote code execution in the context of the vulnerable service. OpenVAS...

Microsoft Exchange and Windows SMTP Service Denial of Service Vulnerability (981832)

This host is missing a critical security update according to Microsoft Bulletin MS10-024. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Exchange and Windows SMTP Service Denial of Service Vulnerability (981832)

This host is missing a critical security update according to Microsoft Bulletin MS10-024. OpenVAS Vulnerability Test $Id: secpodms10-024.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Exchange and Windows SMTP Service Denial of Service Vulnerability 981832 Authors: Veerendra G Copyright: Copyrigh...

Microsoft Windows SMTP Server MX Record Denial of Service Vulnerability

The Microsoft Windows Simple Mail Transfer Protocol SMTP Server is prone to a denial-of-service vulnerability and to to an information-disclosure vulnerability. Successful exploits of the denial-of-service vulnerability will cause the affected SMTP server to stop responding, denying service to...

Microsoft Windows SMTP Server MX Record Denial of Service Vulnerability

The Microsoft Windows Simple Mail Transfer Protocol SMTP Server is prone to a denial-of-service vulnerability and to an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Microsoft Security Bulletin MS10-024 - Important Vulnerabilities in Microsoft Exchange and Windows SMTP Service Could Allow Denial of Service (981832)

Microsoft Security Bulletin MS10-024 - Important Vulnerabilities in Microsoft Exchange and Windows SMTP Service Could Allow Denial of Service 981832 Published: April 13, 2010 | Updated: April 15, 2010 Version: 1.2 General Information Executive Summary This security update resolves one publicly...

Memory corruption

The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2000 SP3, does not properly allocate memory for SMTP command replies, which allows remote attackers to read fragments of e-mail messages by sending a series of...

CVE-2010-0024

The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2003 SP2, does not properly parse MX records, which allows remote DNS servers to cause a denial of service service outage via a crafted response to a DNS MX...