CVEvulnerability

CVE-2003-0468

5.0 MEDIUM Published 2003-08-27 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-08-27
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the target IP address and service name followed by a "!" string, which causes Postfix to attempt to use SMTP to communicate with the target on the associated port.

Affected configurations

• wietse venema postfix 1.0.21 • wietse venema postfix 1.1.11 • wietse venema postfix 1999-09-06 • wietse venema postfix 1999-12-31 • wietse venema postfix 2000-02-28 • wietse venema postfix 2001-11-15 • conectiva linux 7.0 • conectiva linux 8.0

References