Vulnerability Details for MS02-012

On February 27 2002, Microsoft released a patch for a denial of service vulnerability in the Windows 2000 SMTP component. This vulnerability was reported to them in November 2001 though Security Focus's vuln-help list. This bug affects all Windows 2000 systems running the SMTP service that have n...

CVE-2001-0692: Undefined Security Weakness

SMTP proxy in WatchGuard Firebox 2500 and 4500 4.5 and 4.6 allows a remote attacker to bypass firewall filtering via a base64 MIME encoded email attachment whose boundary name ends in two dashes...

CVE-2001-0504: Undefined Security Weakness

Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to gain privileges and conduct activities such as mail relaying...

DoS против SMTP в Exchange

Ошибка при обработке SMTP-команд...

CVE-2001-0690: Undefined Security Weakness

Format string vulnerability in exim 3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva in batched SMTP mode allows a remote attacker to execute arbitrary code via format strings in SMTP mail headers...

CVE-2001-0280: Undefined Security Weakness

Buffer overflow in MERCUR SMTP server 3.30 allows remote attackers to execute arbitrary commands via a long EXPN command...

CVE-2002-0055

SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer BDAT request...

CVE-2002-0054

SMTP service in 1 Microsoft Windows 2000 and 2 Internet Mail Connector IMC in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials...

Microsoft Windows SMTP Service Malformed BDAT Request Remote DoS

It is possible to make the remote SMTP server fail and restart by sending specially crafted 'BDAT' requests. The service will restart automatically, but all the connections established at the time of the attack will be dropped. An attacker may use this flaw to make mail delivery to your site less...

Переполнение буфера в sh39 mailserver (buffer overflow)

Переполнение буфера при длинной строки в SMTP-протоколе...

IIS SMTP component allows mail relaying via Null Session

BindView Security Advisory -------- IIS SMTP component allows mail relaying via Null Session Issue Date: March 1, 2002 Contact: [email protected] Topic: The SMTP component that comes with IIS can be used by anyone for relaying email. Overview: IIS comes with a small SMTP component. The...

Релеинг через MS Exchange (Mail Relaying)

Любой пользователь, способный пройти авторизацию получает доступ к SMTP-серверу...

Security Bulletin MS02-011

---------------------------------------------------------------------- Title: Authentication Flaw Could Allow Unauthorized Users To Authenticate To SMTP Service Date: 27 February 2002 Software: Microsoft Windows 2000; Microsoft Exchange Server 5.5 Impact: Mail Relaying Max Risk: Low Bulletin:...

Security Bulletin MS02-012

---------------------------------------------------------------------- Title: Malformed Data Transfer Request can Cause Windows SMTP Service to Fail Date: 27 February 2002 Software: Microsoft Windows 2000; Microsoft Windows XP Professional Microsoft Exchange 2000 Impact: Denial of Service Max...

CVE-2001-1078

CVE-2001-1078 affects eXtremail 1.1.9 and earlier. The vulnerability is a format-string issue in the flog function that can be exploited remotely to gain root privileges by supplying format specifiers through SMTP commands (HELO, EHLO, MAIL FROM, RCPT TO) and via POP3 commands after authenticatio...

CVE-2001-1078

Format string vulnerability in flog function of eXtremail 1.1.9 and earlier allows remote attackers to gain root privileges via format specifiers in the SMTP commands 1 HELO, 2 EHLO, 3 MAIL FROM, or 4 RCPT TO, and the POP3 commands 5 USER and 6 other commands that can be executed after POP3...

CVE-2001-1078: Undefined Security Weakness

Format string vulnerability in flog function of eXtremail 1.1.9 and earlier allows remote attackers to gain root privileges via format specifiers in the SMTP commands 1 HELO, 2 EHLO, 3 MAIL FROM, or 4 RCPT TO, and the POP3 commands 5 USER and 6 other commands that can be executed after POP3...

CVE-2002-0002

Format string vulnerability in stunnel before 3.22 when used in client mode for 1 smtp, 2 pop, or 3 nntp allows remote malicious servers to execute arbitrary code...

CVE-2001-1542

NAI WebShield SMTP 4.5 and possibly 4.5 MR1a does not filter improperly MIME encoded email attachments, which could allow remote attackers to bypass filtering and possibly execute arbitrary code in email clients that process the invalid attachments...

Stunnel: Format String Bug in versions <3.22

Don't know why this didn't get approved when I submitted it last week, but here goes again... Release Date: 2001-Dec-22 Package: stunnel Versions: stunnel-3.3 = stunnel-3.21c Problem type: format string bugs Exploit script: none currently known Severity: high Network-accessible: yes Discovery:...