CVE-2008-2784 - CVE House
Back to Database
Status published Medium CVE-2008-2784

The smtp_filter function in spamdyke before 3.1.8 does not filter...

Vulnerability Description

The smtp_filter function in spamdyke before 3.1.8 does not filter RCPT commands after encountering the first DATA command, which allows remote attackers to use the server as an open mail relay by sending RCPT commands with invalid recipients, followed by a DATA command, followed by arbitrary RCPT commands and a second DATA command.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-2784

Credits & Attribution

No credits recorded in the NVD database.

References

More from spamdyke

View All →
CVE-2012-0802
Multiple buffer overflows in Spamdyke before 4.3.0 might allow remote...
High 7.5
CVE-2012-0070
spamdyke prior to 4.2.1: STARTTLS reveals plaintext...
High 7.5

Affected Vendor

Affected Software

spamdyke
Vulnerable Versions:
3.0.0, 3.0.1, 3.1.0, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.1.5, 3.1.6, 3.1.7

Timeline

Official Publish: June 19th, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.