CVE-2021-20501

IBM i 7.1, 7.2, 7.3, and 7.4 SMTP allows a network attacker to send emails to non-existent local-domain recipients to the SMTP server, caused by using a…

Medium · published April 21, 2021

CVSS v3.0
5.9
EPSS
1%
Percentile
71.1
In the wild
Unconfirmed
What it is

IBM i 7.1, 7.2, 7.3, and 7.4 SMTP allows a network attacker to send emails to non-existent local-domain recipients to the SMTP server, caused by using a non-default configuration. An attacker could exploit this vulnerability to consume unnecessary network bandwidth and disk space, and allow remote attackers to send spam email. IBM X-Force ID: 198056.

The record
Technical detail
CVSS v3.0
5.9 · MEDIUM
Vector
CVSS:3.0/AV:N/C:N/S:U/AC:H/A:H/UI:N/I:N/PR:N/RC:C/E:U/RL:O
CVSS v4.0
Not supplied
EPSS
0.01338 · 71.1th percentile
Published
2021-04-21T12:05Z
EPSS history
Timeline
  • 21 APR 12:05Z
    IBM i 7.1, 7.2, 7.3, and 7.4 SMTP allows a network attacker to send emails to non-existent local-domain recipients to the SMTP server, caused by using a…
    cvelistv5