CVE-2002-1278: Jacques Gelinas Linuxconf

High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days.

The mailconf module in Linuxconf 1.24, and other versions before 1.28, on Conectiva Linux 6.0 through 8, and possibly other distributions, generates the Sendmail configuration file (sendmail.cf) in a way that configures Sendmail to run as an open mail relay, which allows remote attackers to send Spam email.

Affected products

• Jacques Gelinas Linuxconf: version 1.2.4r2 only; version 1.2.5r3 only

Published 2002-11-12. Last modified 2026-06-16.