CVE-2003-0285

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2003-06-16 · updated 2026-06-16

Description

IBM AIX 5.2 and earlier distributes Sendmail with a configuration file (sendmail.cf) with the (1) promiscuous_relay, (2) accept_unresolvable_domains, and (3) accept_unqualified_senders features enabled, which allows Sendmail to be used as an open mail relay for sending spam e-mail.

Affected products

IBM AIX: through 5.2

References

http://marc.info/?l=bugtraq&m=105284689228961&w=2
http://security.sdsc.edu/advisories/2003.05.13-AIX-sendmail.txt
http://www.kb.cert.org/vuls/id/814617
http://www.securityfocus.com/bid/7580
https://exchange.xforce.ibmcloud.com/vulnerabilities/11993
http://marc.info/?l=bugtraq&m=105284689228961&w=2
http://security.sdsc.edu/advisories/2003.05.13-AIX-sendmail.txt
http://www.kb.cert.org/vuls/id/814617
http://www.securityfocus.com/bid/7580
https://exchange.xforce.ibmcloud.com/vulnerabilities/11993

Get alerted when CVE-2003-0285 or the next vulnerability affects your stack