Solved

EXPLOIT IBM Lotus Notes HTML Message handling buffer overflow

Posted on 2011-03-07
2
1,003 Views
Last Modified: 2013-11-17
I keep getting a notification from my firewall with the following message:


Appliance: FireboxX550e
Time: Mon Mar 07 22:18:00 2011 (CST)
Process: smtp
Message: Policy Name: SMTP-proxy-00 Action: ProxyDrop:  Reason: SMTP IPS match Source IP: 'their.ip.add.ress' Source Port: 9156 Destination IP: 'my.ip.add.ress' Destination Port: 25 sender: email@theircompany.com recipients: email@mycompany.com ips_msg: EXPLOIT IBM Lotus Notes HTML Message handling buffer overflow -1-1 signature_id: WG-1110399 threat_level: 80 signature_cat: smtp-server


I'm assuming there is a problem on their end but I just want to be sure.  I have not experienced any issues with my email server. (I am running Exchange 2003).
0
Comment
Question by:paulms53
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 46

Accepted Solution

by:
Sjef Bosman earned 250 total points
ID: 35068104
My guess is that it's a problem on your end. Apparently, the firewall refuses a very long message, anyway one longer than an older Domino server can handle. If indeed you don't have a Domino server, you could remove the rule from the firewall's configuration.

But I'm no expert in this matter, just trying to explain what I think is happening...
0
 
LVL 1

Author Comment

by:paulms53
ID: 35088490
IPS signatures on my firewall
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Check out this step-by-step guide for using the newly updated Experts Exchange mobile app—released on May 30.
There are times when we need to generate a report on the inbox rules, where users have set up forwarding externally in their mailbox. In this article, I will be sharing a script I wrote to generate the report in CSV format.
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
Suggested Courses
Course of the Month10 days, 3 hours left to enroll

624 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question