Generic SMTP overflows

The remote SMTP server crashes when it is send a command with a too long argument. A cracker might use this flaw to kill this service or worse, execute arbitrary code on your server. OpenVAS Vulnerability Test $Id: smtpoverflows.nasl 6046 2017-04-28 09:02:54Z teissa $ Description: Generic SMTP...

IPSwitch IMail SMTP Buffer Overflow

A vulnerability exists within IMail that allows remote attackers to gain SYSTEM level access to servers running IMail's SMTP daemon versions 6.06 and below. The vulnerability stems from the IMail SMTP daemon not doing proper bounds checking on various input data that gets passed to the IMail...

IMC SMTP EHLO Buffer Overrun

A security vulnerability results because of an unchecked buffer in the IMC code that generates the response to the EHLO protocol command. If the buffer were overrun with data it would result in either the failure of the IMC or could allow the attacker to run code in the security context of the IM...

SMTP server accepts us

This script does not perform any security test. It verifies that OpenVAS that connect to the remote SMTP server and that it can send a HELO request. OpenVAS Vulnerability Test $Id: checksmtphelo.nasl 6046 2017-04-28 09:02:54Z teissa $ Description: SMTP server accepts us Authors: Michel Arboi...

Check if the SMTP server accepts us

This script does not perform any security test. It verifies that the scanner is able to connect to the remote SMTP server and that it can send a HELO request. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Service Detection (3 ASCII digit codes like FTP, SMTP, NNTP...)

This plugin performs service detection. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.14773";...

SMTP Server type and version

This detects the SMTP Server SPDX-FileCopyrightText: 2005 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10263";...

Clearswift MIMEsweeper Manager Console Detection (HTTP)

The remote host appears to be running MIMEsweeper for SMTP, connections are allowed to the web MIMEsweeper manager console. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

poprelayd & sendmail Authentication Problem

The remote SMTP server allows relaying for authenticated users. It is however possible to poison the logs which means that spammers would be able to use your server to send their e-mails to the world, thus wasting your network bandwidth and getting you blacklisted. Note: Some SMTP servers might...

SMTP Server on non standard port

This SMTP server is running on a non standard port. This might be a backdoor set up by attackers to send spam or even control the system. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Sendmail WIZ Command Enabled

The remote Sendmail service accepts the WIZ command. SPDX-FileCopyrightText: 2004 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sendmail:sendmail";...

SMTP antivirus scanner DoS

This script sends the 42.zip recursive archive to the mail server. If there is an antivirus filter, it may start eating huge amounts of CPU or memory. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respecti...

Mail relaying (thorough test)

The remote SMTP server appears to be insufficiently protected against mail relaying. SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MailEnable < 1.8 SMTP Connector Service DNS Lookup DoS Vulnerability

MailEnable is prone to a denial of service DoS vulnerability in the SMTP connector service which will crash if it receives a DNS response with over 100 MX records. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

Mail relaying (thorough test)

The remote SMTP server appears to be insufficiently protected against relaying This means that spammers might be able to use your mail server to send their mails to the world. OpenVAS Vulnerability Test $Id: smtprelay2.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Mail relaying thorough te...

SMTP server on a strange port

This SMTP server is running on a non standard port. This might be a backdoor set up by crackers to send spam or even control your machine. OpenVAS Vulnerability Test $Id: smtpbackdoor.nasl 6053 2017-05-01 09:02:51Z teissa $ Description: SMTP server on a strange port Authors: Michel Arboi Copyrigh...

IPSwitch IMail SMTP Buffer Overflow

A vulnerability exists within IMail that allows remote attackers to gain SYSTEM level access to servers running IMail SPDX-FileCopyrightText: 2002 Digital Defense Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2005-3402

The SMTP client in Mozilla Thunderbird 1.0.5 BETA, 1.0.7, and possibly other versions, does not notify users when it cannot establish a secure channel with the server, which allows remote attackers to obtain authentication information without detection via a man-in-the-middle MITM attack that...

CVE-2005-3402

The SMTP client in Mozilla Thunderbird 1.0.5 BETA, 1.0.7, and possibly other versions, does not notify users when it cannot establish a secure channel with the server, which allows remote attackers to obtain authentication information without detection via a man-in-the-middle MITM attack that...

CVE-2005-3402

The SMTP client in Mozilla Thunderbird 1.0.5 BETA, 1.0.7, and possibly other versions, does not notify users when it cannot establish a secure channel with the server, which allows remote attackers to obtain authentication information without detection via a man-in-the-middle MITM attack that...