Solved

EXPLOIT IBM Lotus Notes HTML Message handling buffer overflow

Posted on 2011-03-07
2
992 Views
Last Modified: 2013-11-17
I keep getting a notification from my firewall with the following message:


Appliance: FireboxX550e
Time: Mon Mar 07 22:18:00 2011 (CST)
Process: smtp
Message: Policy Name: SMTP-proxy-00 Action: ProxyDrop:  Reason: SMTP IPS match Source IP: 'their.ip.add.ress' Source Port: 9156 Destination IP: 'my.ip.add.ress' Destination Port: 25 sender: email@theircompany.com recipients: email@mycompany.com ips_msg: EXPLOIT IBM Lotus Notes HTML Message handling buffer overflow -1-1 signature_id: WG-1110399 threat_level: 80 signature_cat: smtp-server


I'm assuming there is a problem on their end but I just want to be sure.  I have not experienced any issues with my email server. (I am running Exchange 2003).
0
Comment
Question by:paulms53
2 Comments
 
LVL 46

Accepted Solution

by:
Sjef Bosman earned 250 total points
ID: 35068104
My guess is that it's a problem on your end. Apparently, the firewall refuses a very long message, anyway one longer than an older Domino server can handle. If indeed you don't have a Domino server, you could remove the rule from the firewall's configuration.

But I'm no expert in this matter, just trying to explain what I think is happening...
0
 
LVL 1

Author Comment

by:paulms53
ID: 35088490
IPS signatures on my firewall
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Utilizing an array to gracefully append to a list of EmailAddresses
Read this checklist to learn more about the 15 things you should never include in an email signature.
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

896 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now