Every CVE Search/ Get API key

CVE-2001-1075

poprelayd script before 2.0 in Cobalt RaQ3 servers allows remote attackers to bypass...

5.0 MediumPublic exploit

poprelayd script before 2.0 in Cobalt RaQ3 servers allows remote attackers to bypass authentication for relaying by causing a "POP login by user" string that includes the attacker's IP address to be injected into the maillog log file.

Exploit likelihood

2.73%Down 1.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

poprelayd script before 2.0 in Cobalt RaQ3 servers allows remote attackers to bypass authentication for relaying by causing a "POP login by user" string that includes the attacker's IP address to be injected into the maillog log file.

Record
CVE-2001-1075
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Updated
2026-11-02
CVE List No score

poprelayd script before 2.0 in Cobalt RaQ3 servers allows remote attackers to bypass authentication for relaying by causing a "POP login by user" string that includes the attacker's IP address to be injected into the maillog log file.

Record
CVE-2001-1075
Updated
2026-11-02
EUVDEUVD-2001-1056 No score

poprelayd script before 2.0 in Cobalt RaQ3 servers allows remote attackers to bypass authentication for relaying by causing a "POP login by user" string that includes the attacker's IP address to be injected into the maillog log file.

Record
EUVD-2001-1056
Updated
2026-11-03
GitHub AdvisoriesGHSA-h78v-2wx7-pqf7 No score

poprelayd script before 2.0 in Cobalt RaQ3 servers allows remote attackers to bypass...

poprelayd script before 2.0 in Cobalt RaQ3 servers allows remote attackers to bypass authentication for relaying by causing a "POP login by user" string that includes the attacker's IP address to be injected into the maillog log file.

Record
GHSA-h78v-2wx7-pqf7
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBCobalt Raq3 PopRelayD - Arbitrary SMTP Relay2001-07-04

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2001-1075 is a medium vulnerability (CVSS 5.0) in Sun Cobalt Raq 3i, published July 4, 2001. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.73%, the 86th percentile. No source names a fixed version.

References

MoveEnter Open