Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

MS SMTP NULL Session Mail Relay

Medium

Synopsis

The remote SMTP server may be inappropriately used as a relay.

Description

It is possible to authenticate to the remote SMTP service by logging in as a NULL session. An attacker may exploit this flaw to use your SMTP server as a spam relay.

Solution

Upgrade or patch according to vendor recommendations.