CVEvulnerability

CVE-2001-0894

5.0 MEDIUM Published 2001-11-11 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-11-11
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

Vulnerability in Postfix SMTP server before 20010228-pl07, when configured to email the postmaster when SMTP errors cause the session to terminate, allows remote attackers to cause a denial of service (memory exhaustion) by generating a large number of SMTP errors, which forces the SMTP session log to grow too large.

Affected configurations

• wietse venema postfix 1999-09-06 • wietse venema postfix 1999-12-31 • wietse venema postfix 2000-02-28

References