CVE-2023-51747
published 2024-02-27CVE-2023-51747: Apache James prior to versions 3.8.1 and 3.7.5 is vulnerable to SMTP smuggling. A lenient behaviour in line delimiter handling might create a difference of…
PriorityP340high7.1CVSS 3.1
AVNACLPRLUINSUCLIHAN
EPSS
1.04%
60.3th percentile
Apache James prior to versions 3.8.1 and 3.7.5 is vulnerable to SMTP smuggling.
A lenient behaviour in line delimiter handling might create a difference of interpretation between the sender and the receiver which can be exploited by an attacker to forge an SMTP envelop, allowing for instance to bypass SPF checks.
The patch implies enforcement of CRLF as a line delimiter as part of the DATA transaction.
We recommend James users to upgrade to non vulnerable versions.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | james | — | — |
| apache | james | — | — |
| apache_software_foundation | apache_james_server | <= 3.7.4 | — |
| apache_software_foundation | apache_james_server | 3.8 – 3.8.0 | — |
CVSS provenance
nvdv3.17.1HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
vendor_redhat7.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
SMTP smuggling in Apache James
osv·2024-02-27
CVE-2023-51747 [HIGH] SMTP smuggling in Apache James
SMTP smuggling in Apache James
Apache James prior to versions 3.8.1 and 3.7.5 is vulnerable to SMTP smuggling.
A lenient behaviour in line delimiter handling might create a difference of interpretation between the sender and the receiver which can be exploited by an attacker to forge an SMTP envelop, allowing for instance to bypass SPF checks.
The patch implies enforcement of CRLF as a line delimiter as part of the DATA transaction.
We recommend James users to upgrade to non vulnerable versions.
GHSA
SMTP smuggling in Apache James
ghsa·2024-02-27
CVE-2023-51747 [HIGH] CWE-20 SMTP smuggling in Apache James
SMTP smuggling in Apache James
Apache James prior to versions 3.8.1 and 3.7.5 is vulnerable to SMTP smuggling.
A lenient behaviour in line delimiter handling might create a difference of interpretation between the sender and the receiver which can be exploited by an attacker to forge an SMTP envelop, allowing for instance to bypass SPF checks.
The patch implies enforcement of CRLF as a line delimiter as part of the DATA transaction.
We recommend James users to upgrade to non vulnerable versions.
Red Hat
apache-james: SMTP smuggling
vendor_redhat·2024-02-27·CVSS 7.1
CVE-2023-51747 [HIGH] apache-james: SMTP smuggling
apache-james: SMTP smuggling
Apache James prior to versions 3.8.1 and 3.7.5 is vulnerable to SMTP smuggling.
A lenient behaviour in line delimiter handling might create a difference of interpretation between the sender and the receiver which can be exploited by an attacker to forge an SMTP envelop, allowing for instance to bypass SPF checks.
The patch implies enforcement of CRLF as a line delimiter as part of the DATA transaction.
We recommend James users to upgrade to non vulnerable versions.
Statement: This vulnerability doesn't affect any supported Red Hat product.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.openwall.com/lists/oss-security/2024/02/27/4https://lists.apache.org/thread/rxkwbkh9vgbl9rzx1fkllyk3krhgydkohttps://postfix.org/smtp-smuggling.htmlhttps://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide/http://www.openwall.com/lists/oss-security/2024/02/27/4https://lists.apache.org/thread/rxkwbkh9vgbl9rzx1fkllyk3krhgydkohttps://postfix.org/smtp-smuggling.htmlhttps://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide/
2024-02-27
Published