Unscored severity · published Nov 12, 2002
CVE-2002-1278
The mailconf module in Linuxconf 1.24, and other versions before 1.28, on Conectiva Linux 6.0 through 8, and possibly other distributions, generates the Sendmail configuration…
–
CVSS
2.5%
EPSS
No
On KEV
Description
The mailconf module in Linuxconf 1.24, and other versions before 1.28, on Conectiva Linux 6.0 through 8, and possibly other distributions, generates the Sendmail configuration file (sendmail.cf) in a way that configures Sendmail to run as an open mail relay, which allows remote attackers to send Spam email.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Linuxconf · Jacques Gelinas
1.2.4r2; 1.2.5r3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1278
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1278
distro.conectiva.com.br
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000544
Vendor Advisory
http://www.iss.net/security_center/static/10554.php
www.osvdb.org
http://www.osvdb.org/6066
www.securityfocus.com
http://www.securityfocus.com/bid/6118
More from Linuxconf
–
CVE-2002-1506
Buffer overflow in Linuxconf before 1.28r4 allows local users to execute arbitrary code via a long LINUXCONF_LANG environment variable, which overflows an error string that is…