Security patches: Various attacks on SmarterMail possible
The email and collaboration server SmarterMail is vulnerable. The developers have closed several security gaps.
(Image: Alfa Photo/Shutterstock.com)
In the current version of SmarterTools SmarterMail, the developers have resolved a total of eight security issues. Attackers can target instances with DoS attacks, for example, or even view access credentials.
Attack Vectors
This is according to the changelog for the current release, SmarterMail Build 9575. The descriptions of the vulnerabilities are extremely brief, and there are no CVE numbers.
According to the available information, the developers have resolved vulnerabilities in authentication in the context of 2FA endpoints and SMTP, among others. Furthermore, they state that they have more effectively secured access credentials and reduced the attack surface for DoS attacks.
The CERT Bund emergency team at the BSI classifies the security risk as "high".
(des)
