Split Tunnel SMTP Exploit Allows an Attacker to Inject Payloads Into Email Servers

Security researchers from Securolytics discovered a flaw in how email encryption appliances work. The “Split Tunnel SMTP Exploit”” allows attackers to go around email security products. Any EEA accepting inbound SMTP connections is vulnerable to this attack. The attack exploits network topology

Source: