SMTP problems : Sendmail mailing to files

Anfälligkeitssuche		Suche in 219043 CVE Beschreibungen und 99761 Test Beschreibungen, Zugriff auf 10,000+ Quellverweise.
	Tests CVE Alle

Test Kennung: 1.3.6.1.4.1.25623.1.0.10259

Kategorie: SMTP problems

Titel: Sendmail mailing to files

Zusammenfassung: NOSUMMARY

Beschreibung: Description:

The remote SMTP server did not complain when issued the
command :
MAIL FROM: root@this_host
RCPT TO: /tmp/nessus_test

This probably means that it is possible to send mail directly
to files, which is a serious threat, since this allows
anyone to overwrite any file on the remote server.

*** This security hole might be a false positive, since
*** some MTAs will not complain to this test, but instead
*** just drop the message silently.
*** Check for the presence of file 'nessus_test' in /tmp !

Solution : upgrade your MTA or change it.

Risk factor : High

Copyright This script is Copyright (C) 1999 Renaud Deraison

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.
Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.

Test Kennung:	1.3.6.1.4.1.25623.1.0.10259
Kategorie:	SMTP problems
Titel:	Sendmail mailing to files
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote SMTP server did not complain when issued the command : MAIL FROM: root@this_host RCPT TO: /tmp/nessus_test This probably means that it is possible to send mail directly to files, which is a serious threat, since this allows anyone to overwrite any file on the remote server. * This security hole might be a false positive, since * some MTAs will not complain to this test, but instead * just drop the message silently. * Check for the presence of file 'nessus_test' in /tmp ! Solution : upgrade your MTA or change it. Risk factor : High
Copyright	This script is Copyright (C) 1999 Renaud Deraison