CVE-2001-1075: poprelayd script before 2.0 in Cobalt RaQ3 servers allows remote attackers to bypass authentication for rel...

Security readout for executives and security teams

This old Cobalt RaQ3 mail relay issue could let an unauthenticated remote party make the server believe their IP had completed a POP login. That can turn the appliance into an unauthorized mail relay, creating spam, abuse, and reputation risk rather than a clearly documented system takeover. Exposure appears limited to legacy Cobalt RaQ3 systems running poprelayd before 2.0, especially if internet-facing SMTP/POP services remain reachable. Modern environments are unlikely to be affected unless this appliance or its software stack is still retained. Prioritize as a legacy exposure cleanup item. It is most urgent if any Cobalt RaQ3 mail service is still internet-facing, because abuse could harm domain and IP reputation and create operational response costs. Mitigation focus: Inventory any Cobalt RaQ3 systems and confirm whether poprelayd is installed.; Upgrade or remove poprelayd versions earlier than 2.0 where present.; Check vendor or archival guidance before changing legacy appliance mail behavior..

Prepared

Jul 1, 2026, 07:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.