Welcome to our website
To take full advantage of all features you need to login or register. Registration is completely free and takes only a few seconds.
Server Response To SMTP Client EHLO Command Results In ...
Posted by Philipp Esselbach on: 07/25/2002 02:44 AM [ Print | 0 comment(s) ]
Server Response To SMTP Client EHLO Command Results In Buffer Overrun
The Internet Mail Connector (IMC) enables Microsoft Exchange Server to communicate with other mail servers via SMTP. When the IMC receives an SMTP extended Hello (EHLO) protocol command from a connecting SMTP server, it responds by sending a status reply that starts with the following: 250-Hello
Where:
is the fully-qualified domain name (FQDN) of the Exchange server is either the FQDN or the IP address of the server that initiated the connection.
The FQDN would be used if the Exchange5.5 IMC is able to resolve this information through a reverse DNS lookup; the IP address would be used if a reverse DNS lookup was not possible or failed to resolve the connecting servers IP address.
A security vulnerability results because of an unchecked buffer In the IMC code that generates the response to the EHLO protocol command.
Read more
The Internet Mail Connector (IMC) enables Microsoft Exchange Server to communicate with other mail servers via SMTP. When the IMC receives an SMTP extended Hello (EHLO) protocol command from a connecting SMTP server, it responds by sending a status reply that starts with the following: 250-Hello
Where:
is the fully-qualified domain name (FQDN) of the Exchange server is either the FQDN or the IP address of the server that initiated the connection.
The FQDN would be used if the Exchange5.5 IMC is able to resolve this information through a reverse DNS lookup; the IP address would be used if a reverse DNS lookup was not possible or failed to resolve the connecting servers IP address.
A security vulnerability results because of an unchecked buffer In the IMC code that generates the response to the EHLO protocol command.
Read more
Related Threads
01/27/2005 07:41 PM: NT 4 Server running in Active Directory Domain (0) by tmf123
04/21/2004 03:55 PM: Clients can't access server resources when server is locked. (10) by DosFreak
10/04/2003 08:06 PM: server reset (6) by jmmijo
12/17/2002 01:16 AM: Windows .NET Server RC 2 is out!!! (0) by Shakti
11/17/2002 03:00 AM: Making an ftp server run as a service???????? (0) by Mr.Guvernment
11/04/2002 06:20 AM: net config server reports maximum 10 users (3) by Ali
09/18/2002 10:16 PM: Just installed .NET Server RC1 (7) by adamvjackson
09/06/2002 04:27 PM: installing .NET server RC1 over Win2k Pro (6) by Four and Twenty
09/07/2002 02:46 PM: Windows.NET Standard Server RC1 (6) by Admiral LSD
07/29/2002 07:22 PM: Anyone sign up for .NET server RC1 yet? (4) by Davros
04/21/2004 03:55 PM: Clients can't access server resources when server is locked. (10) by DosFreak
10/04/2003 08:06 PM: server reset (6) by jmmijo
12/17/2002 01:16 AM: Windows .NET Server RC 2 is out!!! (0) by Shakti
11/17/2002 03:00 AM: Making an ftp server run as a service???????? (0) by Mr.Guvernment
11/04/2002 06:20 AM: net config server reports maximum 10 users (3) by Ali
09/18/2002 10:16 PM: Just installed .NET Server RC1 (7) by adamvjackson
09/06/2002 04:27 PM: installing .NET server RC1 over Win2k Pro (6) by Four and Twenty
09/07/2002 02:46 PM: Windows.NET Standard Server RC1 (6) by Admiral LSD
07/29/2002 07:22 PM: Anyone sign up for .NET server RC1 yet? (4) by Davros