PT-2006-2015 · Craig Morrison · Mts Pro

Published 2006-03-03 · Updated 2018-10-18 · CVE-2006-0977

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Craig Morrison Mail Transport System Professional (aka MTS Pro) (affected versions not specified)

Description The issue allows remote attackers to relay mail by connecting to the MTS Pro server and sending a MAIL FROM that specifies a domain that is local to the server, when configured to relay all mail through an external SMTP server. This configuration makes the system act as an open relay.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-0977

Affected Products

Mts Pro

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2006-0977 · Security Note
• http://securityfocus.com/bid/16840 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24985 · Note
• http://vupen.com/english/advisories/2006/0786 · Note
• http://securityfocus.com/archive/1/426181/100/0/threaded · Note
• http://secunia.com/advisories/19067 · Note