Snort mailing list archives
RE: smtp rcpt to overflow
From: Ted Stringer <teds () lancasterlawyers com>
Date: 05 Jun 2002 11:13:44 -0400
I just commented it out in the smtp.rules file. Ted On Wed, 2002-06-05 at 10:54, Hugh Brown wrote: I get the same alert all the time...curiously enough it mostly comes from a server at debian aimed at one of my mail servers (none of them lotus) so it appears to be, at least on the surface, legitimate traffic. Hugh -----Original Message----- From: snort-users-admin () lists sourceforge net [mailto:snort-users-admin () lists sourceforge net] On Behalf Of Hugo Ferr Sent: Wednesday, June 05, 2002 10:45 AM To: snort-users () lists sourceforge net Subject: [Snort-users] smtp rcpt to overflow 'SMTP RCPT TO' overflow is buffer overflow for Lotus Sevrers. I have 7444 entries for the same exploit but I have sendmail server. All 744 come form the same address, it looks like guy is pretty persistent or he just cannot figuer out that this is not a Lotus server :-) Just want to double-check: this exploit cannnot cause any damage to sendmail systems, right? _______________________________________________________________ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users _______________________________________________________________ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- SMTP RCPT TO overflow Jhumri Tilayia (Apr 25)
- Re: SMTP RCPT TO overflow Ralf Hildebrandt (Apr 25)
- Re: SMTP RCPT TO overflow Jason Haar (Apr 25)
- Message not available
- Re: SMTP RCPT TO overflow Jason Haar (May 06)
- REMOVE Jason Haar from the list! Martin Forest (May 07)
- Re: REMOVE Jason Haar from the list! Matt Kettler (May 07)
- RE: REMOVE Jason Haar from the list! Jason Withrow (May 07)
- Re: REMOVE Jason Haar from the list! Jason Haar (May 07)
- Message not available
- <Possible follow-ups>
- smtp rcpt to overflow Hugo Ferr (Jun 05)
- RE: smtp rcpt to overflow Hugh Brown (Jun 05)
- RE: smtp rcpt to overflow Ted Stringer (Jun 05)
- Re: smtp rcpt to overflow Edwin Eefting (Jun 05)
- RE: smtp rcpt to overflow Hugh Brown (Jun 05)