CVE-2000-0448
MediumExploitation Probability (EPSS)
High risk82th percentile - higher than 82% of all known CVEs
Summary
The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP address does not resolve to a hostname, allowing remote attackers to access the configuration via the GET_CONFIG command.
Risk Assessment
Attackers may gain access to sensitive configuration settings, potentially leading to unauthorized changes and security breaches.
Recommendation
It is recommended to update the WebShield SMTP tool to the latest version and implement additional security measures, such as restricting access to the management port to trusted IP addresses.
Original NVD description (English source)
The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP address does not resolve to a hostname, which allows remote attackers to access the configuration via the GET_CONFIG command.