CVE-2006-0977

Published Mar 3, 2006

Last updated 3 months ago

Overview

Description: Craig Morrison Mail Transport System Professional (aka MTS Pro) acts as an open relay when configured to relay all mail through an external SMTP server, which allows remote attackers to relay mail by connecting to the MTS Pro server, then sending a MAIL FROM that specifies a domain that is local to the server.
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:N/I:P/A:N

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:craig_morrison:mts_pro:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "68E91C0D-D555-477C-BA32-2A11D4D1D284"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References