5806 matches found
CVE-2000-0033
InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments...
Переполнение буфера в SMTP-шлюзе VirusWall
Переполнение буфера в SMTP-команде HELO позволяет выполнить код на удаленном комьютере. Выпущенный производителем патч оставляет возможность DoS-атаки...
New DOS on Interscan NT/3.32
One month ago, during a audit, we found a new remote DOS on TrendMicro Interscan for NT last version V3.32, build 1011 and 1022. Last October, USSR Labs found a buffer overflow in HELO command, and wrote a very nice exploit with shell code, giving SYSTEM shell access to remote attacker. Trendmicr...
Trend Micro InterScan 3.32 SMTP HELO Command Remote Overflow DoS
It was possible to perform a denial of service against the remote Interscan SMTP server by sending it a special long HELO command. This problem allows an attacker to prevent your Interscan SMTP server from handling requests. This script was written by Alain Thivillon Script audit and contribution...
Re: IMAIL (Ipswitch) DoS with Eudora (Qualcomm)
I'm the lead developer for Windows Eudora here at Qualcomm, and I've been the one who has investigated these issues of SMTP authentication with IPSwitch's IMail server. Here's some details that may be helpful for IMail users: The problem is with IMail SMTP server versions 6.02 and below. When the...
DoS против IMail
ВО время авторизации почтового клиента с использованием SMTP-AUTH блокируется библиотека авторизации и другие клиенты не могут быть авторизованы, при этом не используется таймаут. Ошибка в реализации протокола авторизации приводит к тому, что часть стандартных почтовых клиентов блокируют...
Re: IMAIL (Ipswitch) DoS with Eudora (Qualcomm)
Ipswitch blames BOTH NetScape AND Eudora for not following RFC's, but does nothing to control the situation. It is very simple to deny service to any IMAIL 5.xx or 6.xx server as follows. IMAIL allows SMTP AUTH using various methods, including CRAM-MD5 and LOGIN If a Eudora 4.3 client attaches to...
Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows (1)
// source: https://www.securityfocus.com/bid/1051/info Atrium Software Mercur is a SMTP, POP3, and IMAP mail server. Insufficient boundary checking exists in the code that handles within the SMTP "mail from" command, the POP3 "user" command and the IMAP "login" command. The application will crash...
Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows (2)
Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows 2 source: https://www.securityfocus.com/bid/1051/info Atrium Software Mercur is a SMTP, POP3, and IMAP mail server. Insufficient boundary checking exists in the code that handles within the SMTP "mail from" command, the POP3 "user...
Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows (1)
Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows 1 // source: https://www.securityfocus.com/bid/1051/info Atrium Software Mercur is a SMTP, POP3, and IMAP mail server. Insufficient boundary checking exists in the code that handles within the SMTP "mail from" command, the POP3...
Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows (2)
source: https://www.securityfocus.com/bid/1051/info Atrium Software Mercur is a SMTP, POP3, and IMAP mail server. Insufficient boundary checking exists in the code that handles within the SMTP "mail from" command, the POP3 "user" command and the IMAP "login" command. The application will crash if...
CVE-2000-0158
Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon...
CVE-2000-0158
Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon...
CVE-1999-0284
CVE-1999-0284 describes a DoS vulnerability in SMTP HELO handling causing remote crash via a too-long HELO argument, affecting NT mail servers including Ipswitch, Mdaemon, and Exchange. Related advisories in the dataset (e.g., SLMail, Lotus Notes) describe similar HELO-based DoS issues. Root caus...
CVE-1999-0098
CVE-1999-0098 refers to a buffer overflow in the SMTP HELO command of Sendmail , as described in multiple connected sources. The issue allows a remote attacker to hide activities and potentially compromise system state by overflowing the HELO handling. Connected documents confirm the affected com...
CVE-1999-0531
The connected documents describe a vulnerability class where an SMTP service that supports commands like VRFY and EXPN can enumerate valid user accounts (revealing aliases or mailing lists). The evidence includes a Metasploit module (SMTP User Enumeration Utility) and CIRCL/CVE references linking...
CVE-1999-0419
CVE-1999-0419 relates to the Microsoft SMTP service: when delivering to a server that replies with a 4xx error, the service rapidly and repeatedly retries redelivery, causing a denial of service. Public sources (Red Hat, CVE/NVD entries, PT Security) describe the issue and indicate affected behav...
CVE-1999-0250
Denial of service in Qmail through long SMTP commands...
CVE-1999-0512
CVE-1999-0512 describes a mail server that is explicitly configured to allow SMTP relaying, enabling abuse by spammers. The connected documents corroborate an open mail-relay condition detected by various scanners (Nessus/OpenVAS) and consistently reference reconfiguring the SMTP server to preven...