Mailing List Archive

nt_spam.nasl wrong CVE?
nt_spam.nasl tells

"The remote SMTP server allows anyone to
use it as a mail relay, provided that the source address
is set to '<>'."

and points to CVE-1999-0819 which is:

"NTMail does not disable the VRFY command, even if the administrator
has explicitly disabled it."

... which is something different.

It should probably point to BID-297 (NTMail v3 SPAM Relay
Vulnerability). It looks like it has no CVE.

--
Martin Maèok http://underground.cz/
martin.macok@underground.cz http://Xtrmntr.org/ORBman/