Beveiligingsadvies

CVE-2008-2784

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2008-06-19 20:00:00

Laatst bijgewerkt 2024-08-07 09:14:14

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

The smtp_filter function in spamdyke before 3.1.8 does not filter RCPT commands after encountering the first DATA command, which allows remote attackers to use the server as an open mail relay by sending RCPT commands with invalid recipients, followed by a DATA command, followed by arbitrary RCPT commands and a second DATA command.

← Alle CVE's bekijken Bekijk op cve.org ↗