Microsoft Exchange Server SMTP protocol buffer overflow

Heap overflow on extended SMTP commands...

MS Exchange Server Remote Code Execution Exploit (MS05-021)

漏洞描述：Microsoft Exchange是一款由微软开发的邮件服务程序。Microsoft Exchange Server中存在缓冲区溢出漏洞，攻击者可能利用此漏洞在主机上执行任意指令。 起因是Exchange SMTP Server在处理特殊的扩展SMTP verb时存在缓冲区溢出。漏洞可能允许攻击者连接到Exchange服务器的SMTP端口并发送精心构造的恶意命令，这些命令可能导致拒绝服务或以SMTP服务进程的权限运行攻击者所选择的代码。漏洞影响：受影响的软件： •Microsoft Exchange Server 2000 Service Pack 3 •Microsoft...

CVE-2005-0560

Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003 allows remote attackers to execute arbitrary code via a crafted X-LINK2STATE extended verb request to the SMTP port...

CVE-2005-0560

CVE-2005-0560 describes a heap-based buffer overflow in the SvrAppendReceivedChunk function of xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003. The overflow is triggered by a crafted X-LINK2STATE extended verb, potentially allowing remote code execution with the server’s privile...

gld -- format string and buffer overflow vulnerabilities

Gld has been found vulnerable to multiple buffer overflows as well as multiple format string vulnerabilities. An attacker could exploit this vulnerability to execute arbitrary code with the permissions of the user running Gld, the default user being root. The FreeBSD port defaults to running gld ...

Microsoft Exchange Server SMTP Extended Verb Buffer Overflow Vulnerability

Description Microsoft Exchange Server is prone to a buffer overflow in the X-LINK2STATE SMTP extended verb. Successful exploitation could result in arbitrary code execution. Technologies Affected Microsoft Exchange Server 2000 Microsoft Exchange Server 2000 SP1 Microsoft Exchange Server 2000 SP2...

MS05-021: Vulnerability in SMTP Could Allow Remote Code Execution (894549)

The remote host contains a flaw in its SMTP service that could allow remote code execution. Vulnerable services are Exchange 2003 Windows 2000 and Exchange 2000. A public code is available to exploit this vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description...

Microsoft Exchange Server contains unchecked buffer in SMTP extended verb handling

Overview A vulnerability in some versions of Microsoft's Exchange Server may allow a remote attacker to execute arbitrary code on an affected server. Description Microsoft's Exchange Server supports a number of protocols for handling email, including the Simple Mail Transfer Protocol SMTP and SMT...

CVE-2005-1013

CVE-2005-1013 affects MailEnable Enterprise 1.04 and earlier and MailEnable Professional 1.54 and earlier. The issue is a denial-of-service via an EHLO command containing a Unicode string, which can crash the SMTP service. Connected documents corroborate a MailEnable SMTP DoS vector related to ma...

CVE-2005-1013

The SMTP service in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to cause a denial of service server crash via an EHLO command with a Unicode string...

MS04-035: Vulnerability in SMTP Could Allow Remote Code Execution (885881)

The remote host contains a flaw in its SMTP service that could allow remote code execution. Vulnerable services are SMTP service Windows 2003, Exchange 2003 Windows 2000 and Exchange 2000. C Tenable Network Security, Inc. This test is a registry check which complements what mssmtpcodeexecution.na...

MailEnable IMAP / SMTP Multiple Remote Vulnerabilities

The remote host is running a version of MailEnable Professional or MailEnable Enterprise Edition that is prone to the following vulnerabilities : - An IMAP Authenticate Request Buffer Overflow Vulnerability Sending an AUTHENTICATE or LOGIN command with an argument of 1016 characters or more...

MailEnable Enterprise 1.x - SMTP Remote Denial of Service

MailEnable Enterprise 1.x - SMTP Remote Denial of Service !/usr/bin/perl MailEnable Enterprise = 1.04-Professional = 1.54 SMTPd remote DOS exploit this tools causes the crash of the demon SMTP of mailenable the bug and' caused he/she knows an unicode string sent to the command EHLO BUG discovered...

MailEnable Enterprise 1.x SMTP Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc =============================================================== MailEnable Enterprise 1.x SMTP Remote Denial of Service Exploit =============================================================== !/usr/bin/perl MailEnable Enterprise = 1.04-Profession...

MailEnable Enterprise 1.x SMTP Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl MailEnable Enterprise = 1.04-Professional = 1.54 SMTPd remote DOS exploit this tools causes the crash of the demon SMTP of mailenable the bug and' caused he/she knows an unicode string sent to the command EHLO BUG discovered By CorryL Coded by...

Exploit and advisorie

oooo oooo oooooooo8 ooooooooooo 8888o 88 888 88 888 88 88 888o88 888oooooo 888 88 8888 888 888 o88o 88 o88oooo888 o888o Network security team nst.void.ru Title: SPECTral Personal SMTP Server = 0.4.2 build 338 Bug found by: : Гринвудыч Date: 25.09.2005 URL: spsmtp.net.ru Info: ------ It is free...

SPECTral Personal SMTP Server buffer overflow

Application crashes on oversized e-mail header...

CVE-2005-0892

Buffer overflow in smail 3.2.0.120 allows remote attackers or local users to execute arbitrary code via a long string in the MAIL FROM command and possibly other SMTP commands...

CVE-2005-0892

Buffer overflow in smail 3.2.0.120 allows remote attackers or local users to execute arbitrary code via a long string in the MAIL FROM command and possibly other SMTP commands...

SPECTral Personal SMTP Server 0.4.2 - Denial of Service

!/usr/bin/perl use IO::Socket; Small config If service not DoSeD try to increase this value. Number of trys for DoS. $trys = 10; Quantity signs for atack. $buf = 200000; if @ARGV port \n"; print " Coded by GreenwooD Network Security Team \n\n"; print " ======================= \n"; print " /\n";...