CVE-2004-0833: High severity Debian Debian Linux vulnerability
Sendmail before 8.12.3 on Debian GNU/Linux, when using sasl and sasl-bin, uses a Sendmail configuration script with a fixed username and password, which could allow remote attackers to use Sendmail as an open mail relay and send spam messages.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0833?
The severity of CVE-2004-0833 is considered high due to its potential to allow unauthorized remote access and the use of Sendmail as an open mail relay.
How do I fix CVE-2004-0833?
To fix CVE-2004-0833, update Sendmail to version 8.12.3 or later or configure Sendmail to avoid the use of fixed usernames and passwords.
What systems are affected by CVE-2004-0833?
CVE-2004-0833 affects Debian GNU/Linux versions prior to 8.12.3, specifically version 3.0 across various architectures.
What type of vulnerability is CVE-2004-0833?
CVE-2004-0833 is a configuration vulnerability that can lead to unauthorized use of Sendmail as an open mail relay.
Can CVE-2004-0833 be exploited remotely?
Yes, CVE-2004-0833 can be exploited remotely, allowing attackers to send spam messages leveraging the open mail relay.