Lucene search

[email protected]CVE-2002-1278

HistoryNov 12, 2002 - 5:00 a.m.

CVE-2002-1278

2002-11-1205:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

linuxconf

sendmail

configuration

vulnerability

open mail relay

security issue

4.7 Medium

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.014 Low

EPSS

Percentile

86.1%

JSON

The mailconf module in Linuxconf 1.24, and other versions before 1.28, on Conectiva Linux 6.0 through 8, and possibly other distributions, generates the Sendmail configuration file (sendmail.cf) in a way that configures Sendmail to run as an open mail relay, which allows remote attackers to send Spam email.

CPENameOperatorVersion
jacques_gelinas:linuxconfjacques gelinas linuxconfeq1.2.4r2
jacques_gelinas:linuxconfjacques gelinas linuxconfeq1.2.5r3

CPE	Name	Operator	Version
jacques_gelinas:linuxconf	jacques gelinas linuxconf	eq	1.2.4r2
jacques_gelinas:linuxconf	jacques gelinas linuxconf	eq	1.2.5r3

References

distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000544

www.iss.net/security_center/static/10554.php

www.osvdb.org/6066

www.securityfocus.com/bid/6118

4.7 Medium

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.014 Low

EPSS

Percentile

86.1%

JSON

Related for CVE-2002-1278

openvas3 nessus3