CVSS: 10.0EPSS: 72%CPEs: 1EXPL: 0CVE-2006-0559
https://notcve.org/view.php?id=CVE-2006-0559
Format string vulnerability in the SMTP server for McAfee WebShield 4.5 MR2 and earlier allows remote attackers to execute arbitrary code via format strings in the domain name portion of a destination address, which are not properly handled when a bounce message is constructed. • http://secunia.com/advisories/19491 http://securityreason.com/securityalert/671 http://securitytracker.com/id?1015861 http://www.osvdb.org/24366 http://www.securityfocus.com/archive/1/429812/100/0/threaded http://www.securityfocus.com/bid/16742 http://www.vupen.com/english/advisories/2006/1219 https://exchange.xforce.ibmcloud.com/vulnerabilities/25621 •
CVSS: 7.5EPSS: 1%CPEs: 11EXPL: 0CVE-2002-1121
https://notcve.org/view.php?id=CVE-2002-1121
SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046 ("Message Fragmentation and Reassembly") and supported in such products as Outlook Express, which allows remote attackers to bypass content filtering, including virus checking, via fragmented emails of the message/partial content type. motores de filtrado de contenido SMTP, incluyendo GFI MailSecurity para Exchange/SMTP anteriores a 7.2 InterScan VirusWall anteriores a 3.52 compilación 1494 la configuración por defecto de MIMEDefang anteriores a 2.21 y posiblemente otros productos, no detectan correos electrónicos fragmentados como se define en la RFC2046 ("Fragmentación y ensamblaje de Mensajes"), y soportado en productos como Outlook Express, lo que permite a atacantes remotos evitar el filtrado de contenido, incluyendo la comprobación de virus, mediante correos fragmentados con el tipo de contenido message/partial. • http://archives.neohapsis.com/archives/bugtraq/2002-09/0134.html http://archives.neohapsis.com/archives/bugtraq/2002-09/0135.html http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0113.html http://marc.info/?l=bugtraq&m=103184267105132&w=2 http://marc.info/?l=bugtraq&m=103184501408453&w=2 http://www.iss.net/security_center/static/10088.php http://www.kb.cert.org/vuls/id/836088 http://www.securiteam.com/securitynews/5YP0A0K8CM.html http://www.securityfocus.com/bid& •
CVSS: 7.5EPSS: 2%CPEs: 2EXPL: 0CVE-2001-1542
https://notcve.org/view.php?id=CVE-2001-1542
NAI WebShield SMTP 4.5 and possibly 4.5 MR1a does not filter improperly MIME encoded email attachments, which could allow remote attackers to bypass filtering and possibly execute arbitrary code in email clients that process the invalid attachments. • http://archives.neohapsis.com/archives/bugtraq/2001-11/0294.html http://www.iss.net/security_center/static/7637.php http://www.securityfocus.com/bid/3601 •
CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 3CVE-2000-1129 – Network Associates Webshield SMTP 4.5 - Invalid Outgoing Recipient Field Denial of Service
https://notcve.org/view.php?id=CVE-2000-1129
McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field. • https://www.exploit-db.com/exploits/20432 http://archives.neohapsis.com/archives/bugtraq/2000-11/0324.html http://www.securityfocus.com/bid/1999 •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 2CVE-2000-1130
https://notcve.org/view.php?id=CVE-2000-1130
McAfee WebShield SMTP 4.5 allows remote attackers to bypass email content filtering rules by including Extended ASCII characters in name of the attachment. • http://archives.neohapsis.com/archives/bugtraq/2000-11/0324.html http://www.securityfocus.com/bid/1993 •