Suppose there is Mail server having port 25 open xyz.com
an attacker login on Mail server through telnet and then try to send the
mail but the he can
only send a mail within the xyz company not outside ..so this will be
consider as Vulnerability or not

eg. telnet xyz.com
mail from:<dddd (at) ddddd (dot) com [email concealed]>
mail rcpt :<vbn (at) xyz (dot) com [email concealed]>--->only within the network not outside realying
the mail

--
View this message in context: http://old.nabble.com/Mail-Relay---Open-Mail-Replay-tp32578740p32578740.
html
Sent from the Penetration Testing mailing list archive at Nabble.com.

------------------------------------------------------------------------

This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[ reply ]