Detections
Analytics
VRFY Command Information Disclosure
medium Nessus Network Monitor Plugin ID 2022
Synopsis
The remote host may give an attacker information useful for future attacks.Description
The remote host has the VRFY command enabled. An attacker may use it to enumerate valid accounts on this host and gain more information about them.Solution
Disable this option in your MUA configuration file.Plugin Details
Severity: Medium
ID: 2022
Family: SMTP Servers
Published: 8/18/2004
Updated: 3/6/2019
Nessus ID: 10249