From: rajat swarup (rajats@gmail.com)
Date: Sat Jul 07 2007 - 18:31:32 EDT
On 7 Jul 2007 12:30:59 -0000, wymerzp@sbu.edu <wymerzp@sbu.edu> wrote:
>1)What could I do with the unprotected SMTP access if I can't send mail.
Use the EXPN and VRFY SMTP commands after connecting to the port 25
using telnet to enumerate the users of the system.
Having blocked the SMTP relays, there isn't much you can do unless
these guys are running vulnerable versions of Sendmail.
HTH,
-- Rajat Swarup http://rajatswarup.blogspot.com/ ------------------------------------------------------------------------ This List Sponsored by: Cenzic Swap Out your SPI or Watchfire app sec solution for Cenzic's robust, accurate risk assessment and management solution FREE - limited Time Offer http://www.cenzic.com/wf-spi ------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:57:55 EDT