MailEnable SMTP Server HELO Command Remote DoS

The remote host is running MailEnable, a commercial mail server for Windows. According to the version number in its banner, the SMTP server bundled with the installation of MailEnable on the remote host will crash when handling malformed HELO commands. An unauthenticated attacker may be able to...

MailEnable SMTP Service HELO Command Remote DoS

Binary data 3670.prm...

CVE-2006-3216

Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to cause a denial of service via 1 non-ASCII characters in a reverse DNS lookup result from a Received header, which leads to a Receiver service stop, and 2 unspecified vectors involvi...

CVE-2006-3215

Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to bypass the "text analysis", possibly bypassing SPAM and other filters, by sending an e-mail specifying a non-existent or unrecognized character set...

CVE-2006-3215

Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to bypass the "text analysis", possibly bypassing SPAM and other filters, by sending an e-mail specifying a non-existent or unrecognized character set...

CVE-2006-3215

CVE-2006-3215 affects Clearswift MAILsweeper for SMTP (before 4.3.20) and MAILsweeper for Exchange (before 4.3.20). The issue allows remote attackers to bypass the product’s text analysis and potentially bypass SPAM/other filters by sending an e-mail with a non-existent or unrecognized character ...

CVE-2006-3216

Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to cause a denial of service via 1 non-ASCII characters in a reverse DNS lookup result from a Received header, which leads to a Receiver service stop, and 2 unspecified vectors involvi...

CVE-2006-3216

The CVE-2006-3216 issue affects Clearswift MAILsweeper for SMTP prior to 4.3.20 and MAILsweeper for Exchange prior to 4.3.20. The root cause is a vulnerability in handling certain inputs that can trigger a denial of service: (1) non-ASCII characters in a reverse DNS lookup result from a Received ...

MailEnable 1.x - SMTP 'HELO' Remote Denial of Service

source: https://www.securityfocus.com/bid/18630/info MailEnable is prone to a remote denial-of-service vulnerability. This issue allows remote attackers to crash the application, denying further service to legitimate users. !/usr/bin/perl -w Mailenable SMTP DoS exploit 24/06/2006 Filbert at...

Clearswift MAILsweeper for SMTP < 4.3.20 Multiple Vulnerabilities

Binary data 3659.prm...

Microsoft Exchange Server 20002003 - Outlook Web Access Script Injection

Microsoft Exchange Server 20002003 - Outlook Web Access Script Injection source: https://www.securityfocus.com/bid/18381/info Microsoft Exchange Server Outlook Web Access is prone to a script-injection vulnerability. A remote attacker can exploit this issue by sending a malicious email message to...

Command injection

The SMTP server in Apache Java Mail Enterprise Server aka Apache James 2.2.0 allows remote attackers to cause a denial of service CPU consumption via a long argument to the MAIL command...

CVE-2006-2806

The SMTP server in Apache Java Mail Enterprise Server aka Apache James 2.2.0 allows remote attackers to cause a denial of service CPU consumption via a long argument to the MAIL command...

CVE-2006-2806

CVE-2006-2806: The SMTP server in Apache Java Mail Enterprise Server (Apache James) 2.2.0 is vulnerable to a denial-of-service via a long argument to the MAIL command, consuming CPU. No exploitation or remediation details are provided in the connected documents.

Apache James Server 2.2 - SMTP Denial of Service

Apache James Server 2.2 - SMTP Denial of Service source: https://www.securityfocus.com/bid/18138/info Apache James is prone to a remote denial-of-service vulnerability. This issue is due to the application's failure to efficiently handle malformed SMTP commands. This issue allows remote attackers...

JAMES2.2.0.txt

--------------------------------------------------------------------------- ECHOADV31$2006 JAMES 2.2.0 -- Denial Of Service --------------------------------------------------------------------------- Author : y3dips a.k.a Ahmad Muammar W.K Date : April, 27th 2006 Location : Indonesia, Jakarta Web...

Apache James Server 2.2 - SMTP Denial of Service

source: https://www.securityfocus.com/bid/18138/info Apache James is prone to a remote denial-of-service vulnerability. This issue is due to the application's failure to efficiently handle malformed SMTP commands. This issue allows remote attackers to consume excessive CPU resources of affected...

CVE-2006-2346

vpopmail 5.4.14 and 5.4.15, with cleartext passwords enabled, allows remote attackers to authenticate to an account that does not have a cleartext password set by using a blank password to 1 SMTP AUTH or 2 APOP...

CVE-2006-2267

Kerio WinRoute Firewall before 6.2.1 allows remote attackers to cause a denial of service application crash via unknown vectors in the "email protocol inspectors," possibly 1 SMTP and 2 POP3...

Code injection

Kerio WinRoute Firewall before 6.2.1 allows remote attackers to cause a denial of service application crash via unknown vectors in the "email protocol inspectors," possibly 1 SMTP and 2 POP3...