Timo Longin

A lenient behavior in line delimiter handling might create a difference of interpretation between the sender and the receiver, which can be exploited by an attacker to forge an SMTP envelope, allowing for instance to bypass SPF checks. The issue is related to the enforcement of CRLF as a line delimiter as part of the DATA transaction.

The issue allows SMTP smuggling in certain configurations, enabling remote attackers to inject e-mail messages with a spoofed MAIL FROM address. This bypasses an SPF protection mechanism because sendmail supports <LF>.<CR><LF> while other popular e-mail servers do not. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited. Technical details about exploitation include the use of a published exploitation technique to inject e-mail messages. The `MAIL FROM` address can be spoofed, allowing attackers to bypass security mechanisms.

The issue allows SMTP smuggling in certain configurations, enabling remote attackers to inject e-mail messages with a spoofed MAIL FROM address. This can bypass an SPF protection mechanism due to Exim's support for `<LF>.<CR><LF>`, which some other popular e-mail servers do not support. The exploitation technique can be used to send hidden HTTP requests, effectively allowing attackers to circumvent security policies. Approximately 15,749,391 results are mainly distributed in the United States, Germany, and other countries.

The issue is related to insufficient validation of line endings in the Postfix smtpd daemon, allowing remote attackers to bypass security restrictions and perform email spoofing attacks, such as SMTP Smuggling. This can be exploited by injecting email messages with a spoofed MAIL FROM address, bypassing SPF protection mechanisms. The vulnerability occurs because Postfix supports `<LF>.<CR><LF>` while other popular email servers do not.

The issue is related to a lack of measures to neutralize special elements used in an operating system command, allowing an attacker to execute arbitrary code in the device's operating system with root privileges by injecting a specially crafted command. This can be exploited remotely. The vulnerability has been reportedly exploited in real-world attacks.

An issue was discovered due to a faulty DLT file parser, allowing a crafted DLT file to crash the process. This is caused by missing validation checks, resulting in a heap-based buffer over-read of one byte.

An issue was discovered due to a faulty DLT file parser, allowing a crafted DLT file to crash the process. This is caused by missing validation checks, resulting in a NULL pointer dereference.