FreeBSD Ports: spamdyke

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-2784

The smtpfilter function in spamdyke before 3.1.8 does not filter RCPT commands after encountering the first DATA command, which allows remote attackers to use the server as an open mail relay by sending RCPT commands with invalid recipients, followed by a DATA command, followed by arbitrary RCPT...

CVE-2008-2784

CVE-2008-2784 affects spamdyke prior to 3.1.8. The smtp_filter fails to properly filter RCPT commands after the first DATA command, enabling a remote attacker to use the server as an open relay by issuing RCPT commands with invalid recipients, then a DATA, and continuing with RCPT/DATA sequences....