CVE-2000-1129

McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field...

CVE-2000-1130

McAfee WebShield SMTP 4.5 allows remote attackers to bypass email content filtering rules by including Extended ASCII characters in name of the attachment...

CVE-2000-1129

McAfee WebShield SMTP 4.5 is affected. The issue is a vulnerability in SMTP recipient handling where a malformed recipient field can trigger a remote denial of service. Documents confirm the affected product and the attack vector (remote/network) with a partial availability impact; no explicit re...

CVE-2000-1130

CVE-2000-1130 affects McAfee WebShield SMTP 4.5. An attacker can bypass email content filtering rules by using extended ASCII characters in the attachment name, enabling partial confidentiality/integrity impact as indicated by the record. The vulnerability description provided by multiple sources...

CVE-2000-1130

McAfee WebShield SMTP 4.5 allows remote attackers to bypass email content filtering rules by including Extended ASCII characters in name of the attachment...

CVE-2000-1129

McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field...

McAfee WebShield SMTP 4.5 Multiple Vulnerabilities

The remote WebShield server is subject to two flaws : - It may let mail pass against some filter rules if the attached files names have some strange chars in them - It is possible for an outsider to crash this program and force its reinstallation Nessus did not actually test for these flaws - it...

DoS против WebShiedld

Сервис перестает работать после получения некорректного адреса в SMTP-сеансе. Кроме того, некорректно обрабатываются файлы с расширенным ASCII-символами в именах...

McAfee WebShield SMTP vulnerabilities

McAfee WebShield SMTP v4.5 have at least two vulnerabilities. One with content filter and other with smtp recepient field DoS. Network Associates has been informed 7.11.2000 cont filt and 17.11.2000 recepient field. Vulnerability occures at least NT4sp5 and sp6 installations. Mailformed SMTP...

DoS против WebShield

Некорректная обработка адресов с FQDN с последней точкой в названии домена приводит к "закцикливании" писем...

Network Associates Webshield SMTP 4.5 - Invalid Outgoing Recipient Field Denial of Service

Network Associates Webshield SMTP 4.5 - Invalid Outgoing Recipient Field Denial of Service source: https://www.securityfocus.com/bid/1999/info Network Associates WebShield SMTP is an email virus scanner designed for internet gateways. In the event that WebShield SMTP receives an outgoing email...

Network Associates Webshield SMTP 4.5 - Invalid Outgoing Recipient Field Denial of Service

source: https://www.securityfocus.com/bid/1999/info Network Associates WebShield SMTP is an email virus scanner designed for internet gateways. In the event that WebShield SMTP receives an outgoing email containing six "%20" followed by any character within the recipient field, the application wi...

CVE-2000-0738

WebShield SMTP 4.5 allows remote attackers to cause a denial of service by sending e-mail with a From: address that has a . period at the end, which causes WebShield to continuously send itself copies of the e-mail...

CVE-2000-0447

CVE-2000-0447 describes a buffer overflow in WebShield SMTP 4.5.44’s remote management service. A long configuration parameter passed to the WebShield remote management interface can lead to remote command execution. The vulnerability is triggered via the management/config parameter (remote servi...

CVE-2000-0448

The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP address does not resolve to a hostname, which allows remote attackers to access the configuration via the GETCONFIG command...

CVE-2000-0447

Buffer overflow in WebShield SMTP 4.5.44 allows remote attackers to execute arbitrary commands via a long configuration parameter to the WebShield remote management service...

CVE-2000-0448

CVE-2000-0448 affects WebShield SMTP Management Tool 4.5.44. The vulnerability is an access-control flaw: the management port is not properly restricted when an IP address does not resolve to a hostname, allowing remote access to the configuration via the GET_CONFIG command. Documentation notes a...

WebShield SMTP infinite loop DoS Attack

Description: A DoS attack is very easy to implement on most WebShield SMTP setups. Sending E-mail with a "From: " address that includes a period after the domain name will cause an infinite loop using up resources until the server will finally crash. When restarted, the machine will continue to...

DST2K0003.txt

================================================================================ Delphis Consulting Plc ================================================================================ Security Team Advisories 08/05/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

NAI WebShield SMTP GET_CONFIG Information Disclosure

The remote NAI WebShield SMTP Management tool gives away its configuration when it is issued the command : GETCONFIG This may be of some use to an attacker to gain more knowledge about this system. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid10424; scriptversion...