Penetration Testing mailing list archives

Re: how to exploit the ESMTP service


From: Michael Scheidell <scheidell () secnap net>
Date: Wed, 02 Jan 2008 18:52:54 -0500

Having Telnet access to TCP port 25 is normal for all mail servers that
allow inbound email.

If you disable it, you get no email.as for how to lock down 'ESTMP' service,
begin by getting rid of that obsolete exchange 5.5 which has no patches
available for it and MS has stopped supporting it.
-- 
Michael Scheidell, CTO
|SECNAP Network Security




_________________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(tm). 
For Information please see http://www.spammertrap.com
_________________________________________________________________________

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------


Current thread: