MTA Open Mail Relaying Allowed (thorough test)

This script is Copyright (C) 2003-2017 Tenable Network Security, Inc.


Synopsis :

An open SMTP relay is running on the remote host.

Description :

Nessus has detected that the remote SMTP server is insufficiently
protected against mail relaying. This issue allows any spammer to use
your mail server to send their mail to the world, thus flooding your
network bandwidth and possibly getting your mail server blacklisted.

See also :

https://en.wikipedia.org/wiki/Email_spam

Solution :

Reconfigure your SMTP server so that it cannot be used as an
indiscriminate SMTP relay. Make sure that the server uses appropriate
access controls to limit the extent to which relaying is possible.

Risk factor :

High / CVSS Base Score : 7.8
(CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C)
CVSS Temporal Score : 6.7
(CVSS2#E:F/RL:TF/RC:ND)
Public Exploit Available : true

Family: SMTP problems

Nessus Plugin ID: 11852 ()

Bugtraq ID: 7580
8196
83209

CVE ID: CVE-1999-0512
CVE-2002-1278
CVE-2003-0285

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now