EXPLOIT IBM Lotus Notes HTML Message handling buffer overflow

I keep getting a notification from my firewall with the following message:


Appliance: FireboxX550e
Time: Mon Mar 07 22:18:00 2011 (CST)
Process: smtp
Message: Policy Name: SMTP-proxy-00 Action: ProxyDrop:  Reason: SMTP IPS match Source IP: 'their.ip.add.ress' Source Port: 9156 Destination IP: 'my.ip.add.ress' Destination Port: 25 sender: email@theircompany.com recipients: email@mycompany.com ips_msg: EXPLOIT IBM Lotus Notes HTML Message handling buffer overflow -1-1 signature_id: WG-1110399 threat_level: 80 signature_cat: smtp-server


I'm assuming there is a problem on their end but I just want to be sure.  I have not experienced any issues with my email server. (I am running Exchange 2003).
LVL 1
paulms53Asked:
Who is Participating?
 
Sjef BosmanConnect With a Mentor Groupware ConsultantCommented:
My guess is that it's a problem on your end. Apparently, the firewall refuses a very long message, anyway one longer than an older Domino server can handle. If indeed you don't have a Domino server, you could remove the rule from the firewall's configuration.

But I'm no expert in this matter, just trying to explain what I think is happening...
0
 
paulms53Author Commented:
IPS signatures on my firewall
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.