CVE-2003-0285 Misconfiguration in n/a
IBM AIX ships Sendmail with insecure defaults allowing open mail relay, enabling attackers to send spam via the server.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2003-0285?
CVE-2003-0285 is a medium-severity vulnerability in Ibm Aix, published on 14 May 2003. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
IBM AIX 5.2 and earlier distributes Sendmail with a configuration file (sendmail.cf) with the (1) promiscuous_relay, (2) accept_unresolvable_domains, and (3) accept_unqualified_senders features enabled, which allows Sendmail to be used as an open mail relay for sending spam e-mail.
Which versions are affected by CVE-2003-0285?
It affects 1 product.
Products include Ibm Aix.
How do I fix CVE-2003-0285?
No fix has been published for CVE-2003-0285 yet. Limit exposure of the affected software until one is available.
Is CVE-2003-0285 being exploited?
There is no known exploitation of CVE-2003-0285 in the wild and no public exploit code.
Other vulnerabilities in Ibm Aix
Sources
Also known as GHSA-6g54-wrg4-jxqc.