The mailconf module in Linuxconf 1.24, and other versions before 1.28, on Conectiva Linux 6.0 through 8, and possibly other distributions, generates the Sendmail configuration file (sendmail.cf) in a way that configures Sendmail to run as an open mail relay, which allows remote attackers to send Spam email.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Linuxconf | Jacques_gelinas | 1.2.4r2 (including) | 1.2.4r2 (including) |
| Linuxconf | Jacques_gelinas | 1.2.5r3 (including) | 1.2.5r3 (including) |
References
- http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000544
- http://www.iss.net/security_center/static/10554.php
- http://www.osvdb.org/6066
- http://www.securityfocus.com/bid/6118
- http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000544
- http://www.iss.net/security_center/static/10554.php
- http://www.osvdb.org/6066
- http://www.securityfocus.com/bid/6118