CVE-2007-3803

CVE-2007-3803 affects Clavister CorePlus SMTP ALG, where improper SMTP command parsing in certain circumstances allows remote attackers to bypass address blacklists. Affected versions are CorePlus before 8.80.04 and 8.81.00. The root cause is parsing issues within the SMTP ALG that can be exploit...

CVE-2007-3791

Buffer overflow in the wread function in sockets.c in Cami Sardinha and Nigel Kukard policyd before 1.81 for Postfix allows remote attackers to cause a denial of service and possibly execute arbitrary code via long SMTP commands. NOTE: some of these details are obtained from third party informati...

Buffer overflow

Buffer overflow in the wread function in sockets.c in Cami Sardinha and Nigel Kukard policyd before 1.81 for Postfix allows remote attackers to cause a denial of service and possibly execute arbitrary code via long SMTP commands. NOTE: some of these details are obtained from third party informati...

CVE-2007-3791

Buffer overflow in the wread function in sockets.c in Cami Sardinha and Nigel Kukard policyd before 1.81 for Postfix allows remote attackers to cause a denial of service and possibly execute arbitrary code via long SMTP commands. NOTE: some of these details are obtained from third party informati...

CVE-2007-3791

CVE-2007-3791 affects postfix-policyd (the anti-spam policy daemon for Postfix). The connected sources confirm a buffer overflow in the w_read function in sockets.c, allowing remote attackers to trigger a denial of service and potentially execute arbitrary code via long SMTP commands. The issue i...

CVE-2007-3791

Buffer overflow in the wread function in sockets.c in Cami Sardinha and Nigel Kukard policyd before 1.81 for Postfix allows remote attackers to cause a denial of service and possibly execute arbitrary code via long SMTP commands. NOTE: some of these details are obtained from third party informati...

Stack overflow

Stack-based buffer overflow in the Internet E-mail Auto-Protect feature in Symantec AntiVirus Corporate Edition before 10.1, and Client Security before 3.1, allows local users to cause a denial of service service crash via a long 1 To, 2 From, or 3 Subject header in an outbound SMTP e-mail messag...

CVE-2007-3771

Stack-based buffer overflow in the Internet E-mail Auto-Protect feature in Symantec AntiVirus Corporate Edition before 10.1, and Client Security before 3.1, allows local users to cause a denial of service service crash via a long 1 To, 2 From, or 3 Subject header in an outbound SMTP e-mail messag...

CVE-2007-3771

Symantec CVE-2007-3771 describes a stack-based overflow in Internet Email Auto-Protect of Symantec AntiVirus Corporate Edition (pre-10.1) and Client Security (pre-3.1). The vulnerability allows a local user to crash the real-time Internet Email scanning service by sending an outbound SMTP message...

CVE-2007-3771

Stack-based buffer overflow in the Internet E-mail Auto-Protect feature in Symantec AntiVirus Corporate Edition before 10.1, and Client Security before 3.1, allows local users to cause a denial of service service crash via a long 1 To, 2 From, or 3 Subject header in an outbound SMTP e-mail messag...

SquirrelMail PGP Plugin Command Execution (SMTP)

This module exploits a command execution vulnerability in the PGP plugin of SquirrelMail. This flaw was found while quickly grepping the code after release of some information at http://www.wslabi.com/. Later, iDefense published an advisory .... Reading an email in SquirrelMail with the PGP plugi...

Symantec AntiVirus Malformed RAR and CAB Compression Type Bypass

SUMMARY Two vulnerabilities have been identified in the Symantec Decomposer component used to decompose some types of archive content while scanning for malicious content. Risk Impact High Remote Access | Yes ---|--- Local Access | No Authentication Required | No Exploit publicly available | No...

Internet Communication Manager Denial Of Service Attack

======= Summary ======= Name: Internet Communication Manager Denial Of Service Attack Release Date: 5 July 2007 Reference: NGS00484 Discover: Mark Litchfield [email protected] Vendor: SAP Vendor Reference: SECRES-287 Systems Affected: Confirmed on Windows unconfirmed on NIX Risk: High Status:...

Symantec Mail Security for SMTP libdayzero.dll Executable Parsing DoS

Symantec Mail Security for SMTP, which provides antispam and antivirus protection for the IIS SMTP Service, is installed on the remote Windows host. The version of Symantec Mail Security for SMTP installed on the remote host contains boundary errors in its detection of executable packers in...

Symantec Mail Security for SMTP可执行程序附件解析拒绝服务漏洞

BUGTRAQ ID: 24625 CVECAN ID: CVE-2007-1792 Symantec Mail Security for SMTP是用于扫描邮件的反垃圾邮件、杀毒和内容过滤软件包。 Mail Security的SMS Filter Hub服务没有正确地解析邮件附件中的可执行程序，如果攻击者发送了恶意邮件的话就可能导致无法处理的访问破坏，服务会周期性的拒绝邮件。 Symantec Mail Security for SMTP 5.0.1 Symantec Mail Security for SMTP 5.0 Symantec Mail Security Appliance...

[Full-disclosure] Secunia Research: Symantec Mail Security for SMTP Boundary Errors

====================================================================== Secunia Research 27/06/2007 - Symantec Mail Security for SMTP Boundary Errors - ====================================================================== Table of Contents Affected...

Symantec Mail Security for SMTP buffer overflow

Buffer overflow on packed executables parsing...

602pro Lan Suite 2003 buffer overflow vulnerability

Overview 602pro Lan Suite 2003 contains a buffer overflow vulnerability that may allow an attacker to execute code. Description 602pro Lan Suite 2003 is a mail, firewall and proxy server that runs on the Microsoft Windows operating system.The 602pro Lan Suite 2003 SMTP server contains a buffer...

Symantec Mail Security for SMTP Executable Attachment Parsing Denial of Service

SUMMARY A denial of service has been discovered in Symantec Mail Security for SMTP when parsing Executable Attachments. Risk Impact Low Remote Access | Yes ---|--- Local Access | No Authentication Required | No Exploit publicly available | No AFFECTED PRODUCTS Products | Versions | Solution...

CVE-2007-3253

Multiple unspecified vulnerabilities in Astaro Security Gateway ASG before 7.005 allow remote attackers to cause a denial of service via 1 certain email, which stops the SMTP Proxy during scanning; 2 certain HTTP traffic, which stops or slows down the HTTP proxy during HTTP responses containing...