CVE-2010-0025

The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2000 SP3, does not properly allocate memory for SMTP command replies, which allows remote attackers to read fragments of e-mail messages by sending a series of...

CVE-2010-0024

The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2003 SP2, does not properly parse MX records, which allows remote DNS servers to cause a denial of service service outage via a crafted response to a DNS MX...

CVE-2010-0025

Technical details for CVE-2010-0025 are not provided in the connected documents; only related DNS spoofing CVEs are present. Monitor for updates.

CVE-2010-0024

The CVEs concern the Windows SMTP service (smtpsvc.dll) used by Microsoft Windows 2000 SP4, Windows XP SP3, Windows Server 2003 SP2, Windows Server 2008 SP2/R2, Exchange Server 2003 SP3, Exchange Server 2007 SP2, and Exchange Server 2010. CVE-2010-0024 describes a flaw in parsing DNS MX records t...

Microsoft Windows SMTP Server组件MX记录解析拒绝服务漏洞（MS10-024）

BUGTRAQ ID: 39308 CVE ID: CVE-2010-0024 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的SMTP组件处理特制的DNS邮件交换器（MX）资源记录的方式中存在拒绝服务漏洞。利用该漏洞的尝试不要求进行认证，攻击者可以通过向运行SMTP服务的计算机发送特制网络消息来利用该漏洞。成功利用此漏洞的攻击者可能会导致SMTP服务停止响应，直至重新启动。 Microsoft Exchange Server 2003 SP2 Microsoft Windows XP SP3 Microsoft Windows XP SP2...

Microsoft Windows SMTP Server Memory Allocation Information Disclosure Vulnerability

Description Microsoft Windows SMTP Server is prone to an information-disclosure vulnerability. Attackers can exploit this issue to gain access to sensitive information. Any information obtained may lead to further attacks. Technologies Affected Avaya Meeting Exchange - Client Registration Server...

MS10-024: Microsoft Exchange and Windows SMTP Service DoS (981832)

Binary data 5510.prm...

DNS MX Record Null Prefix (CVE-2010-0024)

A denial of service vulnerability has been reported in the way that Microsoft Windows Simple Mail Transfer Protocol SMTP component handles specially crafted DNS Mail Exchanger MX resource records. The mail exchange MX resource record specifies a mail exchange server for a DNS domain name. A remot...

Microsoft Windows SMTP Server MX Record Denial of Service Vulnerability

Description The Microsoft Windows Simple Mail Transfer Protocol SMTP Server is prone to a denial-of-service vulnerability. Successful exploits will cause the affected SMTP server to stop responding, denying service to legitimate users. Technologies Affected Avaya Meeting Exchange - Client...

MS10-024: Vulnerabilities in Microsoft Exchange and Windows SMTP Service Could Allow Denial of Service (981832) (uncredentialed check)

The installed version of Microsoft Exchange / Windows SMTP Service is affected by at least one vulnerability : - Incorrect parsing of DNS Mail Exchanger MX resource records could cause the Windows Simple Mail Transfer Protocol SMTP component to stop responding until the service is restarted...

MS10-024: Vulnerabilities in Microsoft Exchange and Windows SMTP Service Could Allow Denial of Service (981832)

The installed version of Microsoft Exchange / Windows SMTP Service is affected by at least one vulnerability : - Incorrect parsing of DNS Mail Exchanger MX resource records could cause the Windows Simple Mail Transfer Protocol SMTP component to stop responding until the service is restarted...

CVE-2010-1194

The matchcomponent function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4, treats two strings as equal if one is a substring of the other, which allows remote attackers to spoof trusted certificates via a crafted subjectAltName...

CVE-2010-1194

The matchcomponent function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4, treats two strings as equal if one is a substring of the other, which allows remote attackers to spoof trusted certificates via a crafted subjectAltName...

CVE-2010-1194

The connected sources confirm CVE-2010-1194 affects libESMTP (notably 1.0.3.r1 and 1.0.4) where match_component in smtp-tls.c treats strings as equal if one is a substring of the other, enabling remote certificate spoofing via crafted subjectAltName. Public advisories (Mandriva) indicate patches ...

CVE-2010-1194

The matchcomponent function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4, treats two strings as equal if one is a substring of the other, which allows remote attackers to spoof trusted certificates via a crafted subjectAltName...

Vulnerability in Diffie-Hellman ciphers affects sendmail on VIOS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Mon Mar 29 15:54:57 CDT 2010 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/sendmailadvisory.asc VULNERABILITY SUMMARY VULNERABILITY: AIX sendmail SSL...

Sendmail SMTP Timeout Buffer Overflow (CVE-2006-0058)

Sendmail is a very popular Mail Transfer Agent MTA program that is typically used by medium to large size organizations and Internet Service Providers to send, accept, and relay e-mail. The program uses the SMTP protocol, defined in RFC 821, to communicate with clients when performing these tasks...

CVE-2010-0161

The nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp in Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 on Windows Vista, Windows Server 2008 R2, and Windows 7 allows remote SMTP, IMAP, and POP servers to cause a denial of service heap memory corruption and applicatio...

CVE-2010-0161

CVE-2010-0161 affects Thunderbird (before 2.0.0.24) and SeaMonkey (before 1.1.19) on Windows, where the nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp can be triggered by data from a remote SMTP/IMAP/POP server using SSPI. This may cause heap memory corruption and application crash...

CVE-2010-0161

The nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp in Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 on Windows Vista, Windows Server 2008 R2, and Windows 7 allows remote SMTP, IMAP, and POP servers to cause a denial of service heap memory corruption and applicatio...