CVE-2001-1542

NAI WebShield SMTP 4.5 and possibly 4.5 MR1a does not filter improperly MIME encoded email attachments, which could allow remote attackers to bypass filtering and possibly execute arbitrary code in email clients that process the invalid attachments...

Stunnel: Format String Bug in versions <3.22

Don't know why this didn't get approved when I submitted it last week, but here goes again... Release Date: 2001-Dec-22 Package: stunnel Versions: stunnel-3.3 = stunnel-3.21c Problem type: format string bugs Exploit script: none currently known Severity: high Network-accessible: yes Discovery:...

Postfix session log memory exhaustion bugfix

The Postfix SMTP server maintains a record of SMTP conversations for debugging purposes. Depending on local configuration details this record is mailed to the postmaster whenever an SMTP session terminates with errors. During code maintenance, a stupid error was introduced into the code due to...

CVE-2001-0894

Vulnerability in Postfix SMTP server before 20010228-pl07, when configured to email the postmaster when SMTP errors cause the session to terminate, allows remote attackers to cause a denial of service memory exhaustion by generating a large number of SMTP errors, which forces the SMTP session log...

Security Advisory: Cisco Secure PIX Firewall SMTP Filtering Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco Secure PIX Firewall SMTP Filtering Vulnerability ========================================================================= Version 1.0 For Public Release 2001 September 26 08:00 AM US/Pacific UTC+0800...

Проблема с фильтрацией SMTP в Cisco PIX

Можно обойти фильтрацию SMTP выполнив SMTP - команду DATA в месте, где она не будет корректно воспринята сервером...

Cisco Secure PIX Firewall SMTP Filtering Vulnerability

...

CVE-2001-0690

Format string vulnerability in exim 3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva in batched SMTP mode allows a remote attacker to execute arbitrary code via format strings in SMTP mail headers...

CVE-2001-0692

SMTP proxy in WatchGuard Firebox 2500 and 4500 4.5 and 4.6 allows a remote attacker to bypass firewall filtering via a base64 MIME encoded email attachment whose boundary name ends in two dashes...

CVE-2000-1047

Buffer overflow in SMTP service of Lotus Domino 5.0.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long ENVID keyword in the "MAIL FROM" command...

CVE-2001-0494

Buffer overflow in IPSwitch IMail SMTP server 6.06 and possibly prior versions allows remote attackers to execute arbitrary code via a long From: header...

CVE-2000-1047

The CVE-2000-1047 issue affects Lotus Domino’s SMTP service (versions 5.0.4 and earlier). The root cause is improper validation of the ENVID parameter in a MAIL FROM command, allowing a remote, unauthenticated attacker to trigger a buffer overflow. Consequences documented in the Nessus plugin inc...

CVE-2001-0494

IPSwitch IMail SMTP Buffer Overflow (CVE-2001-0494) affects IMail Server 6.06 and earlier. The OpenVAS/Nessus/NVD entries describe a vulnerability in theIMail SMTP daemon where inadequate bounds checking on input passed to the Mailing List handler allows remote attackers to remotely execute arbit...

CVE-1999-0418

Denial of service in SMTP applications such as Sendmail, when a remote attacker e.g. spammer uses many "RCPT TO" commands in the same connection...

CVE-1999-1529

A buffer overflow exists in the HELO command in Trend Micro Interscan VirusWall SMTP gateway 3.23/3.3 for NT, which may allow an attacker to execute arbitrary code...

CVE-1999-1265

The CVE-1999-1265 entry affects the SLmail SMTP server (3.1 and earlier). The root cause is processing malformed commands beginning with a "(" character, e.g., SEND, VRFY, EXPN, MAIL FROM, RCPT TO, leading to a denial of service. The provided documents do not specify a patch or workaround. Exploi...

CVE-1999-1200

Vintra SMTP MailServer allows remote attackers to cause a denial of service via a malformed "EXPN @" command...

CVE-1999-1511

CVE-1999-1511 affects Xtramail 1.11, with buffer overflow issues in multiple services: POP3 PASS, SMTP HELO, and Control Service username. These overflow conditions can crash the service and may allow arbitrary code execution. Nessus plugin entries indicate fixes targeting Xtramail

CVE-1999-1516

CVE-1999-1516 affects TenFour TFS Gateway SMTP mail server 3.2. A buffer overflow occurs when the MAIL FROM argument exceeds 128 bytes, potentially crashing the server and possibly allowing arbitrary code execution. Documented details specify the vulnerability and impact (crash and possible code ...

CVE-1999-0418

CVE-1999-0418 is a denial-of-service issue in SMTP applications (notably Sendmail) where a remote attacker floods a connection with many RCPT TO commands. The underlying effect is resource exhaustion leading to service disruption. Documents confirm the vulnerability and its generic impact but do ...