Security Best Practice: Protect Yourself from Multiple SMTP Vulnerabilities

Simple Mail Transfer Protocol SMTP is an Internet standard for electronic mail e-mail transmission across Internet Protocol IP networks. SMTP is specified for outgoing mail transport and uses TCP port 25. There are several serious security limitations with the SMTP protocol that allow malicious...

Mandriva Update for sendmail MDVSA-2010:003 (sendmail)

Check for the Version of sendmail OpenVAS Vulnerability Test Mandriva Update for sendmail MDVSA-2010:003 sendmail Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

[ MDVSA-2010:003 ] sendmail

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:003 http://www.mandriva.com/security/ Package : sendmail Date : January 11, 2010 Affected: 2008.0, 2009.0, 2009.1, 2010.0, Corporate 4.0, Enterprise Server 5.0, Multi Network Firewall 2.0 Problem Description...

Mandriva Update for fetchmail MDVA-2010:018 (fetchmail)

Check for the Version of fetchmail OpenVAS Vulnerability Test Mandriva Update for fetchmail MDVA-2010:018 fetchmail Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Linux Security Advisory : sendmail (MDVSA-2010:003)

A security vulnerability has been identified and fixed in sendmail : sendmail before 8.14.4 does not properly handle a '\0' NUL character in a Common Name CN field of an X.509 certificate, which 1 allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server...

CVE-2009-4565

sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name CN field of an X.509 certificate, which 1 allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and 2 allows...

CVE-2009-4565

sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name CN field of an X.509 certificate, which 1 allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and 2 allows...

CVE-2009-4565

CVE-2009-4565 affects sendmail up to version 8.14.3; the vulnerability arises from improper handling of a ‘\0’ character in the Common Name (CN) field of X.509 certificates. This flaw enables MITM spoofing of SSL-based SMTP servers via a crafted server certificate from a trusted CA and could allo...

CVE-2009-4565

sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name CN field of an X.509 certificate, which 1 allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and 2 allows...

Eureka Mail Client Remote Buffer Overflow Exploit XP SP3 English Egghunter Edition

No description provided by source. !/usr/bin/env python Eureka Mail Client Remote Buffer Overflow Exploit XP SP3 English Egghunter Edition Coded By: [email protected] Found By: k4mr4n Securitylab.ir Member Tested On: Windows XPSP3 English Note: This script sets up a fake SMTP server Note: Set th...

Update Protection against Oracle Document Capture EasyMail SMTP AddAttachment Buffer Overflow

A stack buffer overflow vulnerability exists in Oracle Document Capture, which is integrated with Oracle Imaging and Process Management and Oracle Universal Content Management products. The vulnerability is due to a boundary error when parsing a crafted argument passed to the EasyMail SMTP Active...

[SECURITY] Fedora 10 Update: php-pear-Mail-1.1.14-5.fc10

PEAR's Mail package defines an interface for implementing mailers under the PEAR hierarchy. It also provides supporting functions useful to multiple mailer backends. Currently supported backends include: PHP's native mail function, sendmail, and SMTP. This package also provides a RFC822 email...

[SECURITY] Fedora 12 Update: php-pear-Mail-1.1.14-5.fc12

PEAR's Mail package defines an interface for implementing mailers under the PEAR hierarchy. It also provides supporting functions useful to multiple mailer backends. Currently supported backends include: PHP's native mail function, sendmail, and SMTP. This package also provides a RFC822 email...

[SECURITY] Fedora 11 Update: php-pear-Mail-1.1.14-5.fc11

PEAR's Mail package defines an interface for implementing mailers under the PEAR hierarchy. It also provides supporting functions useful to multiple mailer backends. Currently supported backends include: PHP's native mail function, sendmail, and SMTP. This package also provides a RFC822 email...

Eureka Mail buffer overflow

Buffer overflow on POP3 / SMTP server response parsing...

Eureka Mail Client Remote Buffer Overflow Exploit XP SP3 English Egghunter Edition

!/usr/bin/env python Eureka Mail Client Remote Buffer Overflow Exploit XP SP3 English Egghunter Edition Coded By: [email protected] Found By: k4mr4n Securitylab.ir Member Tested On: Windows XPSP3 English Note: This script sets up a fake SMTP server Note: Set the client to this address and check...

Eureka Mail Client Buffer Overflow

!/usr/bin/env python Eureka Mail Client Remote Buffer Overflow Exploit XP SP3 English Egghunter Edition Coded By: [email protected] Found By: k4mr4n Securitylab.ir Member Tested On: Windows XPSP3 English Note: This script sets up a fake SMTP server Note: Set the client to this address and check...

GLSA-200911-03 : UW IMAP toolkit: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200911-03 UW IMAP toolkit: Multiple vulnerabilities Multiple vulnerabilities were found in the UW IMAP toolkit: Aron Andersson and Jan Sahlin of Bitsec reported boundary errors in the 'tmail' and 'dmail' utilities when processing...

Eureka Mail Client Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/env python Eureka Mail Client Remote Buffer Overflow Exploit XP SP3 English Egghunter Edition Coded By: DrIDE and dookie2000ca Found By: Francis Provencher PRL Tested On: Windows XPSP3 English Note: This script sets up a fake SMTP server Note: Set the...

Mercury Mail SMTP AUTH CRAM-MD5 Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Mercury Mail...