CVE-2008-2784

The smtp_filter function in spamdyke before 3.1.8 does not filter RCPT commands after encountering the first DATA command, which allows remote attackers to use…

published June 19, 2008

CVSS
—
EPSS
1%
Percentile
71.5
In the wild
Unconfirmed
What it is

The smtp_filter function in spamdyke before 3.1.8 does not filter RCPT commands after encountering the first DATA command, which allows remote attackers to use the server as an open mail relay by sending RCPT commands with invalid recipients, followed by a DATA command, followed by arbitrary RCPT commands and a second DATA command.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01359 · 71.5th percentile
Published
2008-06-19T20:00Z
EPSS history
Timeline
  • 19 JUN 20:00Z
    The smtp_filter function in spamdyke before 3.1.8 does not filter RCPT commands after encountering the first DATA command, which allows remote attackers to use…
    cvelistv5