Description
IBM i 7.1, 7.2, 7.3, and 7.4 SMTP allows a network attacker to send emails to non-existent local-domain recipients to the SMTP server, caused by using a non-default configuration. An attacker could exploit this vulnerability to consume unnecessary network bandwidth and disk space, and allow remote attackers to send spam email. IBM X-Force ID: 198056.
Related CPE's
o
ibm
i
4
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/198056
VDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6445505
Vendor Advisory
CVSS impact metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
8.2 · High
CVSS V3.1
CVSS V3.0
CVSS V2.0
Information
Source identifier
Vulnerability status
Analyzed
Published
2021-04-21T12:15:08.303
4 years agoLast modified
2022-07-12T17:42:04.277
3 years ago