full-disclosure - MS05-021 Workaround - Block Port 25/SMTP

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Date: Tue Apr 12 20:48:45 2005
From: nocmonkey at gmail.com (Danny)
Subject: MS05-021 Workaround - Block Port 25/SMTP - HAHA!

Good to see that Microsoft has a great sense of humour, in regards
their recently announced Security Bulletin MS05-021 - Vulnerability in
Exchange Server Could Allow Remote Code Execution (894549).

Note one of the workarounds (if you don't have time to patch):

"Use a firewall to block the port that SMTP uses. Typically, that is port 25.

Impact of Workaround:

This workaround should only be used as a last resort to help protect
you from this vulnerability. This workaround may directly affect the
ability to communicate with external parties by e-mail."

And some people wonder why I insist that all of my Microsoft servers
are inaccessible from the Internet; egress and ingress.

...D