|
|
Info |
Last Modified |
| 5 months ago |
|
|
|
|
Description |
Conectiva linuxconf contains a flaw that may allow a remote attacker to send e-mail without authenticating (ie: "spam"). The problem is that linuxconf utility generates the sendmail configuration file (sendmail.cf) with options that configures sendmail to run as an open mail relay.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Misconfiguration
Impact:
Loss of Integrity
Exploit:
Exploit Available
Disclosure:
OSVDB Verified
|
|
Solution |
Upgrade to version 1.29r1 or higher or apply the appropriate patches from Conectiva, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
|
|
Products |
|
linuxconf
 |
1.2.4 r2 |
1.2.5 r3 |
|
|
|
|
|
|
Credit |
- Ademar de Souza Reis Jr. - ademar
 conectiva.com.br -
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
