PT-2006-2015 · Craig Morrison · Mts Pro

Publicado 2006-03-03 · Atualizado 2018-10-18 · CVE-2006-0977

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Craig Morrison Mail Transport System Professional (aka MTS Pro) (affected versions not specified)

Description The issue allows remote attackers to relay mail by connecting to the MTS Pro server and sending a MAIL FROM that specifies a domain that is local to the server, when configured to relay all mail through an external SMTP server. This configuration makes the system act as an open relay.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-0977

Produtos afetados

Mts Pro

Referências · 6

• http://securityfocus.com/bid/16840 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0977 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24985 · Nota
• http://vupen.com/english/advisories/2006/0786 · Nota
• http://securityfocus.com/archive/1/426181/100/0/threaded · Nota
• http://secunia.com/advisories/19067 · Nota