OSVDB ID: 6066 Title: Linuxconf mailconf Improper Sendmail Relay Configuration |
Info |
|
|
Dates |
||||
|
|
Description |
Conectiva linuxconf contains a flaw that may allow a remote attacker to send e-mail without authenticating (ie: "spam"). The problem is that linuxconf utility generates the sendmail configuration file (sendmail.cf) with options that configures sendmail to run as an open mail relay. |
Classification |
Location:
Remote/Network Access Required
Attack Type: Misconfiguration Impact: Loss of Integrity Exploit: Exploit Available Disclosure: OSVDB Verified |
Solution |
Upgrade to version 1.29r1 or higher or apply the appropriate patches from Conectiva, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
|
conectiva.com.br -