Detections
Analytics
EXPN Command Information Disclosure
medium Nessus Network Monitor Plugin ID 2023
Synopsis
The remote host may give an attacker information useful for future attacks.Description
The remote host has the EXPN command enabled. An attacker may use it to enumerate valid accounts on this host and gain more information about them.Solution
Disable this option in your MUA configuration file.Plugin Details
Severity: Medium
ID: 2023
Family: SMTP Servers
Published: 8/18/2004
Updated: 3/6/2019
Nessus ID: 10249