Mail Server Accepts Plaintext Credentials

[Waleed_Wardany]

What is meant by the following threat and it' s impact and how solve this threat THREAT: Your Mail Server responds to the EHLO command which implies that it uses the ESMTP protocol. ESMTP uses the AUTH command which indicates an authentication mechanism to the server. If the server supports the requested authentication mechanism, it performs an authentication protocol exchange to authenticate and identify the user. Optionally, it also negotiates a security layer for subsequent protocol interactions. Your server accepts PLAIN or LOGIN as one of the AUTH parameters. The authentication credentials are transmitted in plaintext over the network and no encryption is performed. IMPACT: Malicious users could obtain mail server credentials by sniffing the traffic. This can allow unauthorized users to use the mail server as an open mail relay. It may also lead to compromise of account credentials that can be used to access other mail services like POP3 and IMAP.

[emnoc]

The authentication credentials are transmitted in plaintext over the network and no encryption is performed.

Read the above quoted part, but it' s based on the vulnerabilty scan ( AUTH ) plain and clear text. if you don' t need SMTP-AUTH, than disable it.

[Bromont_FTNT]

Waleed, You don' t want PLAIN AUTH over SMTP, if you need Auth it should be done via SMTPS or after STARTTLS Disable plaint auth: config system mailserver set amtp-auth enable end