PT-2002-2233 · Sendmail+1 · Sendmail+1

Publicado 2002-11-12 · Atualizado 2008-09-10 · CVE-2002-1278

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Linuxconf versions 1.24 through 1.27

Description: The issue allows remote attackers to send spam email by configuring Sendmail to run as an open mail relay. This is due to the mailconf module generating the Sendmail configuration file in a way that enables this behavior.

Recommendations: For Linuxconf versions 1.24 through 1.27, update to version 1.28 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2002-1278

Produtos afetados

Linuxconf

Sendmail

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-1278 · Nota de Segurança
• http://securityfocus.com/bid/6118 · Nota
• http://iss.net/security_center/static/10554.php · Aviso do Fabricante
• http://osvdb.org/6066 · Nota
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000544 · Aviso do Fabricante