PT-2002-2233 · Sendmail+1 · Sendmail+1

Published 2002-11-12 · Updated 2008-09-10 · CVE-2002-1278

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Linuxconf versions 1.24 through 1.27

Description: The issue allows remote attackers to send spam email by configuring Sendmail to run as an open mail relay. This is due to the mailconf module generating the Sendmail configuration file in a way that enables this behavior.

Recommendations: For Linuxconf versions 1.24 through 1.27, update to version 1.28 or later to resolve the issue.

Fix

Related Identifiers

CVE-2002-1278

Affected Products

Linuxconf

Sendmail

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-1278 · Security Note
• http://iss.net/security_center/static/10554.php · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000544 · Vendor Advisory
• http://securityfocus.com/bid/6118 · Note
• http://osvdb.org/6066 · Note