Re: TELNET and SMTP

["rajat swarup" <rajats () gmail com>]

On 7 Jul 2007 12:30:59 -0000, wymerzp () sbu edu <wymerzp () sbu edu> wrote:
> 1)What could I do with the unprotected SMTP access if I can't send mail.

Use the EXPN and VRFY SMTP commands after connecting to the port 25
using telnet to enumerate the users of the system.
Having blocked the SMTP relays, there isn't much you can do unless
these guys are running vulnerable versions of Sendmail.

HTH,
--
Rajat Swarup

http://rajatswarup.blogspot.com/

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Swap Out your SPI or Watchfire app sec solution for
Cenzic's robust, accurate risk assessment and management
solution FREE - limited Time Offer

http://www.cenzic.com/wf-spi
------------------------------------------------------------------------