Smartermail 6919 Exploit Patched

An attacker can send specially crafted serialized .NET objects directly to port 17001 via a TCP socket.

Search your SmarterMail server for the following IoCs (Indicators of Compromise): smartermail 6919 exploit

SmarterMail versions prior to Build 6985 exposed three .NET remoting endpoints on port 17001: /Servers , /Mail , and /Spool . An attacker can send specially crafted serialized

Attackers scan for SmarterMail servers with port 17001 open. Payload Delivery: smartermail 6919 exploit