CVE-2008-2784

no score yetEPSS 1.4%

spamdyke spamdyke: no CVSS score yet. EPSS 1.4% chance of exploitation in the next 30 days.

The smtp_filter function in spamdyke before 3.1.8 does not filter RCPT commands after encountering the first DATA command, which allows remote attackers to use the server as an open mail relay by sending RCPT commands with invalid recipients, followed by a DATA command, followed by arbitrary RCPT commands and a second DATA command.

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2008-06-19
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

spamdyke:spamdyke

References

http://secunia.com/advisories/30408
http://www.spamdyke.org/documentation/Changelog.txt
http://www.vupen.com/english/advisories/2008/1684/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/42658
http://secunia.com/advisories/30408

Check your stack JSON