5797 matches found
CVE-2001-0504
Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to gain privileges and conduct activities such as mail relaying...
CVE-2001-0690
Format string vulnerability in exim 3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva in batched SMTP mode allows a remote attacker to execute arbitrary code via format strings in SMTP mail headers...
CVE-2001-0692
The vulnerability CVE-2001-0692 affects WatchGuard Firebox SMTP proxy in models 2500 and 4500 running versions 4.5 and 4.6. A remote attacker can bypass firewall filtering by sending a base64 MIME email attachment whose boundary name ends with two dashes, exploiting how the SMTP proxy processes M...
CVE-2001-0280
CVE-2001-0280 : The MERCUR SMTP server 3.30 contains a buffer overflow in the handling of the EXPN command that remote attackers can trigger with a long argument to execute arbitrary commands. The vulnerability is documented in CVE/NVD entries and corroborated by Nessus plugin notes, which descri...
CVE-2001-0504
The CVE-2001-0504 entry affects the SMTP service in Microsoft Windows 2000. A flaw in the authentication handling could allow an intruder to bypass credentials, enabling the attacker to send mail and, in effect, relay through the vulnerable server. The underlying issue is a weakness in how the SM...
CVE-2001-0690
CVE-2001-0690 describes a format-string vulnerability in Exim in batched SMTP mode that can let an unauthenticated remote attacker execute arbitrary code via format strings in SMTP headers. The entry specifies affected Exim versions: 3.22-10 (Red Hat), 3.12 (Debian), and 3.16 (Conectiva). Attack ...
CVE-2001-0280
Buffer overflow in MERCUR SMTP server 3.30 allows remote attackers to execute arbitrary commands via a long EXPN command...
Vulnerability Details for MS02-012
On February 27 2002, Microsoft released a patch for a denial of service vulnerability in the Windows 2000 SMTP component. This vulnerability was reported to them in November 2001 though Security Focus's vuln-help list. This bug affects all Windows 2000 systems running the SMTP service that have n...
DoS против SMTP в Exchange
Ошибка при обработке SMTP-команд...
CVE-2002-0054
SMTP service in 1 Microsoft Windows 2000 and 2 Internet Mail Connector IMC in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials...
CVE-2002-0055
SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer BDAT request...
Microsoft Windows SMTP Service Malformed BDAT Request Remote DoS
It is possible to make the remote SMTP server fail and restart by sending specially crafted 'BDAT' requests. The service will restart automatically, but all the connections established at the time of the attack will be dropped. An attacker may use this flaw to make mail delivery to your site less...
Переполнение буфера в sh39 mailserver (buffer overflow)
Переполнение буфера при длинной строки в SMTP-протоколе...
IIS SMTP component allows mail relaying via Null Session
BindView Security Advisory -------- IIS SMTP component allows mail relaying via Null Session Issue Date: March 1, 2002 Contact: [email protected] Topic: The SMTP component that comes with IIS can be used by anyone for relaying email. Overview: IIS comes with a small SMTP component. The...
Релеинг через MS Exchange (Mail Relaying)
Любой пользователь, способный пройти авторизацию получает доступ к SMTP-серверу...
Security Bulletin MS02-011
---------------------------------------------------------------------- Title: Authentication Flaw Could Allow Unauthorized Users To Authenticate To SMTP Service Date: 27 February 2002 Software: Microsoft Windows 2000; Microsoft Exchange Server 5.5 Impact: Mail Relaying Max Risk: Low Bulletin:...
Security Bulletin MS02-012
---------------------------------------------------------------------- Title: Malformed Data Transfer Request can Cause Windows SMTP Service to Fail Date: 27 February 2002 Software: Microsoft Windows 2000; Microsoft Windows XP Professional Microsoft Exchange 2000 Impact: Denial of Service Max...
CVE-2001-1078
CVE-2001-1078 affects eXtremail 1.1.9 and earlier. The vulnerability is a format-string issue in the flog function that can be exploited remotely to gain root privileges by supplying format specifiers through SMTP commands (HELO, EHLO, MAIL FROM, RCPT TO) and via POP3 commands after authenticatio...
CVE-2001-1078
Format string vulnerability in flog function of eXtremail 1.1.9 and earlier allows remote attackers to gain root privileges via format specifiers in the SMTP commands 1 HELO, 2 EHLO, 3 MAIL FROM, or 4 RCPT TO, and the POP3 commands 5 USER and 6 other commands that can be executed after POP3...