Symantec Mail Security for Domino Server Premium AntiSpam Email Relay Vulnerability

Bugtraq ID:	19866
Class:	Design Error
CVE:	CVE-2006-5545
Remote:	Yes
Local:	No
Published:	Sep 06 2006 12:00AM
Updated:	Jun 27 2007 06:48PM
Credit:	The vendor reported this issue.
Vulnerable:	Symantec Mail Security for Domino 5.1
Not Vulnerable:	Symantec Mail Security for Domino 5.1.2.28

Symantec Mail Security for Domino Server Premium AntiSpam Email Relay Vulnerability

Symantec Mail Security for Domino Server Premium AntiSpam may allow remote attackers to employ a vulnerable server as a spam relay.

Exploiting this issue can cause the Domino Server protected by Symantec Mail Security to accept and relay email messages that are addressed to a specific non-RFC-compliant SMTP email address.

An attacker may leverage this issue to send unsolicited bulk email or spam to users.

Symantec Mail Security for Domino Server 5.1.0 is affected by this vulnerability.

Symantec Mail Security for Domino Server Premium AntiSpam Email Relay Vulnerability

An exploit is not required to leverage this issue because an attacker can use a mail client to launch an attack.

Symantec Mail Security for Domino Server Premium AntiSpam Email Relay Vulnerability

Solution:
Symantec has released Symantec Mail Security for Domino 5.1.2.28 to address this issue.
Please see the referenced advisory for more information.

Symantec Mail Security for Domino Server Premium AntiSpam Email Relay Vulnerability

References:

• Symantec Home Page (Symantec)
  
• Symantec Security Advisory SYM06-021 (Symantec Mail Security for Domino Server (Symantec)