Description
CRLF injection vulnerability in mailback.pl in Erik C. Thauvin mailback allows remote attackers to use mailback as a "spam proxy" by modifying mail headers, including recipient e-mail addresses, via newline characters in the Subject field.
References
- 20060205 mailback script exploit mailing-list
- mailback-mail-relay(24540) vdb-entry
- ADV-2006-0459 vdb-entry
- 20060210 Re: mailback script exploit mailing-list
- 22955 vdb-entry
- 18748 third-party-advisory
- http://vc.thauvin.net/cvs/cgi/mailback/mailback.pl?view=log