OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Postfix Archives: Re: Exploit attempt or spammer?

Re: Exploit attempt or spammer?

Subject: Re: Exploit attempt or spammer?
From: Anand Buddhdev (arbanand.org)
Date: Mon Jan 24 2000 - 08:32:30 CST

On Mon, Jan 24, 2000 at 08:07:12AM -0600, Joe Laffey wrote:

> Hi,
>
> Does the report below look like someone trying to do a buffer overflow and
> gain access, or what? Is the line "BUFFER OVERFLOW through:" generated by
> Postfix, or has the person typed that in or what? I would appreciate any
> insight...

No. That line is preceded by the word "In:" so the mickeymouse at
the other end typed it.

> Thanks,
>
> Joe laffey
>
>
> Transcript of session follows.
>
> Out: 220 mail2.laffeycomputer.com ESMTP Postfix
> In: HELO
> xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> Out: 250 mail2.laffeycomputer.com
> In: MAIL FROM:<mickeymouseyahoo.com>
> Out: 250 Ok
> In: RCPT TO:<jahoopadupajahoopa.com>
> Out: 550 <jahoopadupajahoopa.com>: Relay access denied
> In: DATA
> Out: 503 Error: need RCPT command
> In: To: jahoopadupajahoopa.com
> Out: 502 Error: command not implemented
> In: From: mickeymouseyahoo.com
> Out: 502 Error: command not implemented
> In: Subject: Test work
> Out: 502 Error: command not implemented
> In:
> Out: 500 Error: bad syntax
> In: BUFFER OVERFLOW through:
> Out: 502 Error: command not implemented
> In: 209.74.129.137
> Out: 502 Error: command not implemented
> In: .
> Out: 502 Error: command not implemented
> In: QUIT
> Out: 221 Bye
>
> No message was collected successfully.
>
> 

-- 
See complete headers for more info

This archive was generated by hypermail 2b27 : Mon Jan 24 2000 - 08:41:48 CST