WebShield SMTP infinite loop DoS Attack

Description: A DoS attack is very easy to implement on most WebShield SMTP setups. Sending E-mail with a "From: " address that includes a period after the domain name will cause an infinite loop using up resources until the server will finally crash. When restarted, the machine will continue to...

CVE-2000-0657

The vulnerability CVE-2000-0657 affects AnalogX Proxy Server versions 4.04 and earlier. It is a buffer overflow triggered by a long HELO command in SMTP, leading to a remote-denial of service. The provided documents do not include a remediation or a confirmed exploit status. No further technical ...

CVE-2000-0657

Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long HELO command in the SMTP protocol...

CVE-2000-0657

Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long HELO command in the SMTP protocol...

AnalogX Proxy 4.0 4 - Denial of Service

// source: https://www.securityfocus.com/bid/1504/info AnalogX Proxy is a simple proxy server that allows a user to connect a network of computers to the internet through the proxy gateway. Many of the services provided contain buffer overrun vulnerabilities that can allow an attacker to crash th...

AnalogX Proxy 4.0 4 - Denial of Service

AnalogX Proxy 4.0 4 - Denial of Service // source: https://www.securityfocus.com/bid/1504/info AnalogX Proxy is a simple proxy server that allows a user to connect a network of computers to the internet through the proxy gateway. Many of the services provided contain buffer overrun vulnerabilitie...

CVE-2000-0428

CVE-2000-0428 : Buffer overflow in the SMTP gateway of InterScan Virus Wall versions 3.32 and earlier allows remote command execution via a long filename in a uuencoded attachment. Impact is consistent with a HIGH severity (CVSS 2.0: AV:N/AC:L/Au:N/C:C/I:C/A:C). No remediation details are provide...

Out of order SMTP DATA commands incorrectly allow pass-through mode in some firewall smtp filters/proxies

Hi people, Issue: Out of order SMTP DATA commands incorrectly allow pass-through mode in some firewall smtp filters/proxies. I first found this sometime in 1996 can't remember exact date- long time ago : , and notified the relevant firewall vendor. After about 4 generations it's still not fixed i...

Проблемы с SMTP-прокси

Многие SMTP-прокси сервера используемые в качестве брандмауэров позволяют обойти защиту SMTP-Сервера с помощью команды DATA, расположенной до RCPT:. В таком случае все команды следующие далее будут восприниматься как данные и не будут проверяться...

SX-20000620-3

FSC Internet Corp. / SecureXpert Labs SecureXpert Labs Advisory SX-20000620-3 - Partial Denial of Service in Check Point Firewall-1 on Windows NT Summary The SMTP Security Server component of Check Point Firewall-1 4.0 and 4.1 is vulnerable to a simple network-based attack which raises the firewa...

ITHouse Mail Server v1.04 To: Field Handling Overflow

The remote SMTP server is ITHouse Mail Server. Versions 1.04 or earlier of this server are vulnerable to a buffer overrun which happens during the delivery routine of the mails if an attacker has sent a message with a too long 'To:' field. An attacker may use this flaw to execute arbitrary code o...

CVE-2000-0582

Check Point FireWall-1 4.0 and 4.1 allows remote attackers to cause a denial of service by sending a stream of invalid commands such as binary zeros to the SMTP Security Server proxy...

Check Point Software Firewall-1 4.01.4.1 - Resource Exhaustion (Denial of Service)

Check Point Software Firewall-1 4.01.4.1 - Resource Exhaustion Denial of Service source: https://www.securityfocus.com/bid/1416/info The Check Point Firewall-1 SMTP Security Server in Firewall-1 4.0 and 4.1 on Windows NT is vulnerable to a simple network-based attack which can increase the...

Check Point Software Firewall-1 4.0/1.4.1 - Resource Exhaustion (Denial of Service)

source: https://www.securityfocus.com/bid/1416/info The Check Point Firewall-1 SMTP Security Server in Firewall-1 4.0 and 4.1 on Windows NT is vulnerable to a simple network-based attack which can increase the firewall's CPU utilization to 100%. Sending a stream of binary zeros or other invalid...

DoS против WebMail

Переполнение буфера в SMTP-команде HELO. В CMail - переполнение буфера при длинном имени пользователя в веб-интерфейсе порт 8002...

NetWin DSMTP (Dmail) ETRN Command Overflow

The remote SMTP server is vulnerable to a buffer overflow when the ETRN command is issued arguments which are too long. A remote attacker could exploit this to crash the SMTP server, or possibly execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; if description...

Imate SMTP Server HELO Command Remote Overflow DoS

The remote SMTP server crashes when it is issued a HELO command with an argument longer than 1200 chars. This problem may allow an attacker to shut down your SMTP server. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10435; scriptversion "1.28";...

DST2K0003.txt

================================================================================ Delphis Consulting Plc ================================================================================ Security Team Advisories 08/05/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

Переполнение буфера в DMail Server

Классическое переполнение буфера в SMTP-команде ETRN...

DST2K0006: Denial of Service Possibility in Imate WebMail Server v2.5

========================================================================== ====== Delphis Consulting Plc ========================================================================== ====== Security Team Advisories 26/05/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers...