Signature Detail
Short Name |
SMTP:EXPLOIT:RELAY-ATTEMPT-VAR |
|---|---|
Severity |
Low |
Recommended |
No |
Category |
SMTP |
Release Date |
2004/03/24 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SMTP Exploit: Relay Attempt (@...@ in Email Address) variant
This signature detects an e-mail address with more than one "@" in it (for example, someone@x.com@y.com). This can be an attempt to relay an e-mail (to x.com through y.com in the example) and is against the SMTP specifications.
Extended Description
Detection of an SMTP transaction in which any e-mail address contains more than one at symbol ("@") may indicate that an unauthorized party is attempting to relay messages through the targeted servers.
References