Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 04/07/2001 Updated: 10/10/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

poprelayd script prior to 2.0 in Cobalt RaQ3 servers allows remote malicious users to bypass authentication for relaying by causing a "POP login by user" string that includes the attacker's IP address to be injected into the maillog log file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sun cobalt raq 3i

source: wwwsecurityfocuscom/bid/2986/info poprelayd is a script that parses /var/log/maillog for valid pop logins, and based upon the login of a client, allows the person logged into the pop3 service to also send email from the ip address they're accessing the system with poprelayd doesn't authenticate output to the /var/log/maillog fil ...

NVD-CWE-Other http://archives.neohapsis.com/archives/bugtraq/2001-07/0064.html http://archives.neohapsis.com/archives/bugtraq/2001-07/0150.html http://www.securityfocus.com/bid/2986 https://exchange.xforce.ibmcloud.com/vulnerabilities/6806 https://nvd.nist.gov https://www.exploit-db.com/exploits/20994/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2001-1075

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect