Skip to content
Threat Feed
Subscribe

Tag

Smtp

3 briefs RSS
low advisory

Detection of Potential Command and Control via SMTP on Port 26/TCP

Adversaries, including the BadPatch malware family, utilize non-standard port 26/TCP for SMTP-based command and control and data exfiltration to evade traditional security monitoring.

command-and-control exfiltration network-traffic smtp badpatch
1r 3t
critical advisory

Tabs Mail Carrier 2.5.1 MAIL FROM Buffer Overflow Vulnerability

Tabs Mail Carrier 2.5.1 is vulnerable to a buffer overflow in the MAIL FROM SMTP command, allowing remote attackers to execute arbitrary code by sending a crafted MAIL FROM parameter with an oversized buffer to overwrite the EIP register and execute a bind shell payload via port 25.

cve-2019-25646 buffer-overflow smtp code-execution
2r 1t
high advisory

Maddy Mail Server LDAP Filter Injection Vulnerability

Maddy Mail Server is vulnerable to LDAP injection via unsanitized username in the `auth.ldap` module, enabling identity spoofing, LDAP directory enumeration, and attribute value extraction by injecting arbitrary LDAP filter expressions through the username field in SMTP submission or IMAP LOGIN interfaces.

Maddy Mail Server ldap-injection authentication-bypass information-disclosure maddy smtp imap
2r 3t