CVE-2004-0833

Опубликовано: 23 дек. 2004

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Sendmail before 8.12.3 on Debian GNU/Linux, when using sasl and sasl-bin, uses a Sendmail configuration script with a fixed username and password, which could allow remote attackers to use Sendmail as an open mail relay and send spam messages.

Ссылки

http://secunia.com/advisories/12667
http://www.debian.org/security/2004/dsa-554
Patch
Vendor Advisory
http://www.securityfocus.com/bid/11262
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17531
http://secunia.com/advisories/12667
http://www.debian.org/security/2004/dsa-554
Patch
Vendor Advisory
http://www.securityfocus.com/bid/11262
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17531

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*

EPSS

Процентиль: 70%

0.00664

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2004-0833

ubuntu

больше 20 лет назад

CVE-2004-0833

debian

больше 20 лет назад

Sendmail before 8.12.3 on Debian GNU/Linux, when using sasl and sasl-b ...

GHSA-9gjh-cfqr-c8q2

github

около 3 лет назад

EPSS

Процентиль: 70%

0.00664

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other