Sendmail contains a flaw that may allow a remote attacker to relay mail through the server. In older versions of sendmail, default configurations allowed many methods of e-mail relay. This allowed a remote attacker to send mail through the server and cause the email to appear to come from the victim server. This makes it more difficult to easily spot where the mail comes from and allows basic e-mail spoofing. This practice is typically referred to "sending spam" or "spamming".

Upgrade to version 8.9.3, 8.10 or higher, as it has been reported to fix this vulnerability. It is also possible to correct the flaw by implementing the following workaround: configure your Sendmail daemon not to accept and relay mail from unauthorized domains.

• ISS X-Force ID: 210
• Generic Informational URL: http://spam.abuse.net/
• Other Solution URL: http://www.mail-abuse.com/support/an_sec3rdparty.html
• Vendor Specific Solution URL: http://www.sendmail.org/antispam.html
• CIAC Advisory: i-005c

Unknown or Incomplete

NVD does not currently have a CVSSv2 score assigned.