Security Bulletin MS02-037: Server Response To SMTP Client EHLO Command Results In Buffer Overrun (Q326322)

---------------------------------------------------------------------- Title: Server Response To SMTP Client EHLO Command Results In Buffer Overrun Q326322 Date: 24 July 2002 Software: Microsoft Exchange 5.5 Impact: Ability to run arbitrary code Max Risk: Medium Bulletin: MS02-037 Microsoft...

CodeBlue 5.1 - SMTP Response Buffer Overflow

// source: https://www.securityfocus.com/bid/5300/info CodeBlue is an Apache httpd log scanning utility that attempts to contact the administrators of hosts infected with worms. A buffer overflow vulnerability has been reported in CodeBlue. The condition occurs when processing responses from SMTP...

CodeBlue 5.1 - SMTP Response Buffer Overflow

CodeBlue 5.1 - SMTP Response Buffer Overflow // source: https://www.securityfocus.com/bid/5300/info CodeBlue is an Apache httpd log scanning utility that attempts to contact the administrators of hosts infected with worms. A buffer overflow vulnerability has been reported in CodeBlue. The conditi...

JanaServer multiple vulnerabilities

Title: Multiple vulnerabilities in JanaServer Author: ZARAZA Date: July, 22 2002 Affected: JanaServer 2.2.1 and prior JanaServer 1.46 and prior Vendor: Thomas Hauck Risk: High critical if some services, for example HTTP, are available from public interface Remote: yes Exploitable: yes Vendor...

Portcullis Security Advisory - IIS Microsoft SMTP Service Encapsu lated SMTP Address Vulnerability

Portcullis Security Advisory IIS Microsoft SMTP Service Encapsulated SMTP Address Vulnerability Update to Microsoft Security Bulletin MS99-027: NT Exchange Server Encapsulated SMTP Address Vulnerability. Vulnerability discovery and development: Thomas Liam Romanis Security Testing Services Manage...

Mail relaying via IIS SMTP service

Unauthorized mail relayin then using speciall address format...

Microsoft IIS 4.0/5.0 - SMTP Service Encapsulated SMTP Address (MS99-027)

source: https://www.securityfocus.com/bid/5213/info Microsoft Exchange 5.5 and the SMTP Simple Mail Transfer Protocol service included with IIS Internet Information Services 4.0 and 5.0 are vulnerable to an encapsulated SMTP address vulnerability. The vulnerability was originally announced in...

Microsoft IIS 4.05.0 - SMTP Service Encapsulated SMTP Address (MS99-027)

Microsoft IIS 4.05.0 - SMTP Service Encapsulated SMTP Address MS99-027 source: https://www.securityfocus.com/bid/5213/info Microsoft Exchange 5.5 and the SMTP Simple Mail Transfer Protocol service included with IIS Internet Information Services 4.0 and 5.0 are vulnerable to an encapsulated SMTP...

SMTP settings

This plugin sets various SMTP parameters because several checks need to use a third-party host/domain name in order to work properly. The checks that rely on this are SMTP or DNS relay checks. By default, 'example.edu' is being used for this purpose. However, under some circumstances, this may le...

CVE-2001-0894

Postfix SMTP server (pre-20010228-pl07) is affected by a remote DoS: when configured to email the postmaster on SMTP errors, a storm of errors can cause the SMTP session log to grow, leading to memory exhaustion. Debian advisory DSA-093-1 and OpenVAS/NESL entries corroborate a remote DoS due to e...

CVE-2001-0894

Vulnerability in Postfix SMTP server before 20010228-pl07, when configured to email the postmaster when SMTP errors cause the session to terminate, allows remote attackers to cause a denial of service memory exhaustion by generating a large number of SMTP errors, which forces the SMTP session log...

CVE-2002-0002

Format string vulnerability in stunnel before 3.22 when used in client mode for 1 smtp, 2 pop, or 3 nntp allows remote malicious servers to execute arbitrary code...

CVE-2002-0055

SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer BDAT request...

CVE-2002-0002

The connected advisory confirms a format-string vulnerability in stunnel for client-mode negotiations (smtp, pop, nntp). Affected versions: 3.15 through 3.21c; 3.22 is not vulnerable. The flaw arises in the functions that implement client-side SMTP/POP/NNTP negotiations, allowing a malicious serv...

CVE-2001-0894: Undefined Security Weakness

Vulnerability in Postfix SMTP server before 20010228-pl07, when configured to email the postmaster when SMTP errors cause the session to terminate, allows remote attackers to cause a denial of service memory exhaustion by generating a large number of SMTP errors, which forces the SMTP session log...

CVE-2002-0055: Incorrect Resource Transfer Between Spheres

SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer BDAT request...

CVE-2002-0002: Undefined Security Weakness

Format string vulnerability in stunnel before 3.22 when used in client mode for 1 smtp, 2 pop, or 3 nntp allows remote malicious servers to execute arbitrary code...

CVE-2002-0416

CVE-2002-0416 affects SH39 MailServer versions 1.21 and earlier. A buffer overflow is triggered by a long command to the SMTP port, allowing remote attackers to cause a denial of service and potentially execute arbitrary code. The connected documents confirm the affected product and the underlyin...

CVE-2002-0432

Citadel/UX 5.90 and earlier are affected by a buffer overflow in sysdep.c (functions lprintf and cprintf). The flaw can be triggered by long HELO commands sent to the SMTP server, leading to denial of service and possibly arbitrary code execution on a remote attacker. Affected product/version: Ci...

CVE-2002-0432

Buffer overflow in 1 lprintf and 2 cprintf in sysdep.c of Citadel/UX 5.90 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via attacks such as a long HELO command to the SMTP server...