Re: Re: mail server vulnerability

[praveen_recker () sify com]

Hi Abhishek,

You can try connecting to the SMTP server using telnet,say
c:/>telnet smtp_ip 25
this should not be successful....so system admins should block TELNET to SMTP servers. If successful this gives u the 
banner. Based upon version and vendor search for any exploits available for free (refer milw0rm, metasploit etc) if u 
have commercial tools(coreimpact, saint etc) it's well and good.
If u are good at Perl develop ur own script and start sending attacks by changing USER names, DOMAIN names etc to 
overly long strings, format specifiers etc.

Best Regards,
Praveen Darshanam,
Security Researcher,
INDIA