 |
|
SMTP_expn
|
| |
Code:
p178
Severity: Notice
Description: The EXPN can get the list of the user's detailed address,and it can also be used to determine whether there is user name.
Impact:
All SMTP servers which support the EXPN command.
Corrective: If ther is a great deal of the events in a short period of time, need to check the source address of these orders, especially for users of the postmaster and decode, EXPN command can be removed, without prejudice to send and receive mail.
|