CVEvulnerability

CVE-2005-0337

7.5 HIGH Published 2005-05-02 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2005-05-02
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname.

Affected configurations

• wietse venema postfix 2.1.3 • redhat enterprise linux 4.0 • redhat enterprise linux desktop 4.0 • suse suse linux 8.0 • suse suse linux 8.1 • suse suse linux 8.2 • suse suse linux 9.0 • suse suse linux 9.1 • suse suse linux 9.2

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=267837 Vendor Advisory
http://marc.info/?l=bugtraq&m=110763358832637&w=2 marc.info
http://secunia.com/advisories/14137/ Patch
http://www.redhat.com/support/errata/RHSA-2005-152.html www.redhat.com
http://www.securityfocus.com/bid/12445 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/19218 exchange.xforce.ibmcloud.com
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11339 oval.cisecurity.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=267837 Vendor Advisory
http://marc.info/?l=bugtraq&m=110763358832637&w=2 marc.info
http://secunia.com/advisories/14137/ Patch
http://www.redhat.com/support/errata/RHSA-2005-152.html www.redhat.com
http://www.securityfocus.com/bid/12445 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/19218 exchange.xforce.ibmcloud.com
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11339 oval.cisecurity.org