National Vulnerability Database (CVE-2002-1278)

National Cyber-Alert System Vulnerability Summary: CVE-2002-1278
Orirignal release date: 2002-11-12 Source: US-CERT/NIST ### Overview The mailconf module in Linuxconf 1.24, and other versions before 1.28, on Conectiva Linux 6.0 through 8, and possibly other distributions, generates the Sendmail configuration file (sendmail.cf) in a way that configures Sendmail to run as an open mail relay, which allows remote attackers to send Spam email. ### Impact CVSS Severity: 7 (High) Range: remote Authentication: input,config Impact Type: sec_prot other="1" ### Reference to Advisories, Solutions, and Tools External Source: ISS X-Force Name: Linuxconf sendmail.cf file allows mail relaying Hyperlink: http://www.iss.net/security_center/static/10554.php External Source: Security Focus Name: bid 6118 Hyperlink: http://online.securityfocus.com/bid/6118 ### Vulnerable Software and Vendor Linuxconf (Jacques Gelinas) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1278