Search...

Gordano NTMail 3.0/5.0 - SPAM Relay

1999-06-08T00:00:00

ID EDB-ID:19237
Type exploitdb
Reporter Geo
Modified 1999-06-08T00:00:00

Description

                                        
                                            source: https://www.securityfocus.com/bid/297/info

NTMail v3.X is susceptible to being used as a mail relay for SPAM or other unsolicited email. Connecting to the mail server (tcp25) and issuing a 'mail from' command with &lt;&gt; as the data will allow an unathorized user to relay email via this server.

Gordano's own JUCE product (to prevent mail relay attacks and other SPAM activity) will not prevent NTMAIL v.3.x from being used as a mail relay.

Specify &lt;&gt; in the 'Mail From' field.

JSON Vulners Source

Initial Source

{"id": "EDB-ID:19237", "vendorId": null, "type": "exploitdb", "bulletinFamily": "exploit", "title": "Gordano NTMail 3.0/5.0 - SPAM Relay", "description": "", "published": "1999-06-08T00:00:00", "modified": "1999-06-08T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "cvss2": {}, "cvss3": {}, "href": "https://www.exploit-db.com/exploits/19237", "reporter": "Geo", "references": [], "cvelist": [], "immutableFields": [], "lastseen": "2022-01-13T06:40:04", "viewCount": 7, "enchantments": {"score": {"value": 5.3, "vector": "NONE"}, "dependencies": {}, "backreferences": {"references": [{"type": "cve", "idList": ["CVE-2020-25004"]}]}, "exploitation": null, "vulnersScore": 5.3}, "sourceHref": "https://www.exploit-db.com/download/19237", "sourceData": "source: https://www.securityfocus.com/bid/297/info\r\n\r\nNTMail v3.X is susceptible to being used as a mail relay for SPAM or other unsolicited email. Connecting to the mail server (tcp25) and issuing a 'mail from' command with <> as the data will allow an unathorized user to relay email via this server.\r\n\r\nGordano's own JUCE product (to prevent mail relay attacks and other SPAM activity) will not prevent NTMAIL v.3.x from being used as a mail relay.\r\n\r\nSpecify <> in the 'Mail From' field. ", "osvdbidlist": ["130"], "exploitType": "remote", "verified": true, "_state": {"dependencies": 1646770728}}