Deck 14: Mail Vulnerabilities

Question 1

SMTP, IMAP, and POP are the main protocols supporting e-mail systems all over the world.

Answer 1

True

Question 2

Most corporate mail servers allow third-party mail relaying.

Answer 2

False

Question 3

An e-mail message stored on an IMAP server can be modified from any remote location with access to Internet.

Answer 3

True

Question 4

Attackers can disrupt network services, spread viruses, and deny service to network users by exploiting the vulnerabilities of e-mail.

Question 5

Firefox is a browser that is free of bugs, coding errors, or vulnerabilities.

Question 6

A ____ entry permits hackers to take complete control of a mail system.

A)buffer
B)backdoor
C)queue
D)spool

Question 7

The Morris worm created chaos on the Internet in 1988 by spreading through the ____ program.

A)telnet
B)Eudora
C)sendmail
D)pine

Question 8

____ allows users to access e-mail messages that remain on the mail server.

A)SMTP
B)SNMP
C)POP3
D)IMAP

Question 9

____, as a technique, is quite similar to e-mail bombing. However, it is accomplished differently and involves enrolling potentially hundreds of target users through e-mail lists and distributed e-mail message systems.

A)List linking
B)Phishing
C)E-mail spoofing
D)419

Question 10

____ are used by programs on the Internet (remote) and on a user's computer (local) to confirm the user's identity to any third party concerned.

A)Symmetric keys
B)Symmetric encryption algorithms
C)Digital signatures
D)SMTP and IMAP

Question 11

___________________________________ is the method used to transfer e-mail messages from one server to another or from a client computer to a server.

Question 12

____________________ is the practice of sending an identical e-mail repeatedly to the target user.

Question 13

____________________ is commercial or nuisance e-mail with no effective opt-out system.

Question 14

____________________ is a way of tampering with e-mail so that the message received appears to be from a known and trusted person,when it is actually sent by an impostor.

Question 15

____________________ uses e-mails from a purported financial institution (often eBay or Paypal) stating that there is something wrong with an account, and the account holder needs to log in to set it straight.

Question 16

How can an SMTP server be exploited?

Question 17

Describe the main characteristics of buffer overflow attacks for SMTP servers.

Question 18

What are the functions of IMAP?