CVE-2006-0977

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-03-03 · updated 2026-06-16

Description

Craig Morrison Mail Transport System Professional (aka MTS Pro) acts as an open relay when configured to relay all mail through an external SMTP server, which allows remote attackers to relay mail by connecting to the MTS Pro server, then sending a MAIL FROM that specifies a domain that is local to the server.

Affected products

Craig Morrison Mts Pro: all versions

References

http://secunia.com/advisories/19067
http://www.securityfocus.com/archive/1/426181/100/0/threaded
http://www.securityfocus.com/bid/16840
http://www.vupen.com/english/advisories/2006/0786
https://exchange.xforce.ibmcloud.com/vulnerabilities/24985
http://secunia.com/advisories/19067
http://www.securityfocus.com/archive/1/426181/100/0/threaded
http://www.securityfocus.com/bid/16840
http://www.vupen.com/english/advisories/2006/0786
https://exchange.xforce.ibmcloud.com/vulnerabilities/24985

Get alerted when CVE-2006-0977 or the next vulnerability affects your stack