View Attack Vector

General Information

SMTP Injection

Variants:
Direct Persistent Session

Also Known As:
MX Injection, Mail Command Injection, Email Injection

Vector Type:
Attack

Relevance:
Generic

Layer:
Application-Level

Platforms:
Any

Target Type:
Application

Affected Mechanisms:
Authentication Verification

Invented In:
15/02/2006

Added In:
08/12/2014

Vector Operation Method:
Malicious inputs can affect the structure of SMTP requests generated in the server

Direct Variant:

SMTP Injection

Also Known As:
MX Injection

Typical Severity:
Medium

Resources:

CAPEC

White Papers:

Paper I

Learn More:

Persistent Variant:

Stored SMTP Injection

Also Known As:
Persistent SMTP Injection

Typical Severity:
Medium

Resources:

White Papers:

Learn More:

Session Variant:

SMTP Injection via Session Puzzling

Also Known As:
Session SMTP Injection

Typical Severity:
Medium

Resources:

White Papers:

Learn More: