Test ID:	1.3.6.1.4.1.25623.1.0.10248
Category:	SMTP problems
Title:	Sendmail 'decode' flaw
Summary:	NOSUMMARY
Description:	Description: The remote SMTP server seems to pipe mail sent to the 'decode' alias to a program. There have been in the past a lot of security problems regarding this, as it would allow an attacker to overwrite arbitrary files on the remote server. We suggest you deactivate this alias. Solution : remove the 'decode' line in /etc/aliases. Risk factor : High
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-1999-0096 Cert/CC Advisory: CA-93.16 Cert/CC Advisory: CA-95.05 Computer Incident Advisory Center Bulletin: A-13 Computer Incident Advisory Center Bulletin: A-14 Sun Security Bulletin: 00122 http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/122&type=0&nav=sec.sba XForce ISS Database: smtp-dcod
Copyright	This script is Copyright (C) 1999 Renaud Deraison

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.