CVE-2005-2472

Affected product: BusinessMail 4.60.00. Vulnerability: multiple buffer overflows in the SMTP command handling (HELO and MAIL FROM) that allow a remote, unauthenticated attacker to crash the SMTP service; the Nessus entry also notes possible arbitrary code execution within the server process. Impa...

CVE-2002-2121

CVE-2002-2121 affects SurfControl SuperScout Email filter for SMTP 3.5.1. The vulnerability allows a remote attacker to cause a denial-of-service crash by sending excessively long SMTP commands (HELO or RCPT TO), likely due to a buffer overflow. Exploit details and a concrete remediation are not ...

GoodTech SMTP Server < 5.17 Multiple Buffer Overflows

The version of GoodTech SMTP Server running on the remote host is prone to multiple buffer overflow vulnerabilities when processing RCPT TO commands. An attacker can exploit these flaws to run arbitrary code remotely, by default as the SYSTEM user. C Tenable Network Security, Inc...

nbSMTP: Format string vulnerability

Background nbSMTP is an SMTP client suitable to run in chroot jails, in embedded systems, laptops and workstations. Description Niels Heinen discovered a format string vulnerability. Impact An attacker can setup a malicious SMTP server and exploit this vulnerability to execute arbitrary code with...

GLSA-200508-03 : nbSMTP: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200508-03 nbSMTP: Format string vulnerability Niels Heinen discovered a format string vulnerability. Impact : An attacker can setup a malicious SMTP server and exploit this vulnerability to execute arbitrary code with the...

BusinessMail SMTP < 4.7 Multiple Command Remote Overflows

Binary data 3155.prm...

BusinessMail Multiple SMTP Command Remote Buffer Overflows

The remote host is running BusinessMail, a commercial mail server for Windows from NetCPlus. The version of BusinessMail on the remote host fails to sanitize input to the 'HELO' and 'MAIL FROM' SMTP commands, which can be exploited by an unauthenticated, remote attacker to crash the SMTP service...

BusinessMail Server 4.60.00 - Remote Buffer Overflow

BusinessMail Server 4.60.00 - Remote Buffer Overflow ===== Start BusMailSMTPDOS.pl ===== Usage: BusMailSMTPDOS.pl BusMailSMTPDOS.pl 127.0.0.1 BusinessMail email server system 4.60.00 Download: http://www.netcplus.com/ use IO::Socket; use strict; my$socket = ""; if $socket =...

BusinessMail <= 4.60.00 Remote Buffer Overflow Exploit

Exploit for unknown platform in category dos / poc ====================================================== BusinessMail BusMailSMTPDOS.pl 127.0.0.1 BusinessMail email server system 4.60.00 Download: http://www.netcplus.com/ use IO::Socket; use strict; my$socket = ""; if $socket =...

CVE-2005-2387

Multiple stack-based buffer overflows in GoodTech SMTP server 5.16 allow remote attackers to execute arbitrary code via 1 a RCPT TO command with a long DNS name, or 2 a large number of RCPT TO commands with a long e-mail name arugment in the last command...

CVE-2005-2387

Affected product: GoodTech SMTP Server 5.16; vulnerability in RCPT TO command processing causes multiple stack-based buffer overflows, enabling remote arbitrary code execution (often as SYSTEM). Remediation: upgrade to 5.17 or later.

CVE-2005-2387

Multiple stack-based buffer overflows in GoodTech SMTP server 5.16 allow remote attackers to execute arbitrary code via 1 a RCPT TO command with a long DNS name, or 2 a large number of RCPT TO commands with a long e-mail name arugment in the last command...

[Full-disclosure] ClamAV Multiple Rem0te Buffer Overflows

Date July 25, 2005 Vulnerability ClamAV is the most widely used GPL antivirus library today. It provides file format support for virus analysis. During analysis ClamAV Antivirus Library is vulnerable to buffer overflows allowing attackers complete control of the system. These vulnerabilities can ...

nbsmtp -- format string vulnerability

When nbsmtp is executed in debug mode, server messages will be printed to stdout and logged via syslog. Syslog is used insecurely and user-supplied format characters are directly fed to the syslog function, which results in a format string vulnerability. Under some circumstances, an SMTP server m...

GoodTech SMTP Server for Windows DoS

Incomplete e-mail addres in RCPT TO: command causes server to crash. Oversized RCPT TO: causes buffer overflow...

GoodTech SMTP server 5.16 RCPT TO command remote buffer overflow

Arbitrary code execution in GoodTech's SMTP server discovered by Raphal Rigo Product: SMTP server by GoodTech Systems Affected Version: 5.16 Evaluation verified, = regged and 5.15 probably too Not affected Version: 5.17 OS affected: All WinNT NT/2K/XP/2K3 Risk: Critical Remote Exploit: yes URL:...

GoodTech SMTP Server < 5.17 'RCPT TO' Command Remote Overflow (deprecated)

Binary data 3106.prm...

SquirrelMail Arbitrary Variable Overwriting Vulnerability

GulfTech Security Research July 14th, 2005 Vendor : The SquirrelMail Project Team URL : http://www.squirrelmail.org/ Version : SquirrelMail 1.4.5-RC1 && Earlier Risk : Variable Overwriting Description: SquirrelMail is a standards-based webmail package written in php. It includes built-in pure PHP...

CVE-2001-1542

CVE-2001-1542 concerns NAI WebShield SMTP 4.5 (and possibly 4.5 MR1a), where the product does not filter improperly MIME-encoded email attachments. The consequence described across connected records is that this could allow remote attackers to bypass filtering and potentially execute arbitrary co...

CVE-2001-1542

NAI WebShield SMTP 4.5 and possibly 4.5 MR1a does not filter improperly MIME encoded email attachments, which could allow remote attackers to bypass filtering and possibly execute arbitrary code in email clients that process the invalid attachments...