F-Secure Messaging Security Gateway Email Relay Vulnerability

Bugtraq ID:	35389
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 16 2009 12:00AM
Updated:	Jun 16 2009 01:39PM
Credit:	The vendor reported this issue.
Vulnerable:	F-Secure Messaging Security Gateway 5.5.3 F-Secure Messaging Security Gateway 5.5
Not Vulnerable:

F-Secure Messaging Security Gateway Email Relay Vulnerability

F-Secure Messaging Security Gateway may allow remote attackers to employ a vulnerable computer as a spam relay.

Exploiting this issue can cause the mail server to accept and relay email messages that are addressed to a specific email address.

An attacker may leverage this issue to send unsolicited bulk email or spam to users.

F-Secure Messaging Security Gateway 5.5.x are affected.

F-Secure Messaging Security Gateway Email Relay Vulnerability

An exploit is not required to leverage this issue because an attacker can use a mail client to launch an attack.

F-Secure Messaging Security Gateway Email Relay Vulnerability

Solution:
F-Secure has released a fix to address this issue. Please see the references for details.

F-Secure Messaging Security Gateway Email Relay Vulnerability

References:

• Messaging Security Gateway (F-Secure)
  
• Security Advisory FSC-2009-2 (F-Secure)