CVEvulnerability

CVE-2005-2151

5.0 MEDIUM Published 2005-07-06 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-07-06
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

spf.c in Courier Mail Server does not properly handle DNS failures when looking up Sender Policy Framework (SPF) records, which could allow attackers to cause memory corruption.

Affected configurations

• double precision incorporated courier mail server 0.46 • double precision incorporated courier mail server 0.47 • double precision incorporated courier mail server 0.48 • double precision incorporated courier mail server 0.48.1 • double precision incorporated courier mail server 0.48.2 • double precision incorporated courier mail server 0.49.0 • double precision incorporated courier mail server 0.50.0

References