CVE-2001-1075
Cobalt RaQ3i - Unauthenticated Mail Relay Bypass via Maillog Injection
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2001-1075. PoCs published by Andrea Barisani.
AI-analyzed exploit summary This exploit demonstrates how to bypass poprelayd's authentication by injecting a crafted string into /var/log/maillog via sendmail, allowing unauthorized SMTP relay. The PoC uses a telnet session to send a malformed 'mail from' command that mimics a valid POP login log entry.
Description
poprelayd script before 2.0 in Cobalt RaQ3 servers allows remote attackers to bypass authentication for relaying by causing a "POP login by user" string that includes the attacker's IP address to be injected into the maillog log file.
Exploits (1)
This exploit demonstrates how to bypass poprelayd's authentication by injecting a crafted string into /var/log/maillog via sendmail, allowing unauthorized SMTP relay. The PoC uses a telnet session to send a malformed 'mail from' command that mimics a valid POP login log entry.