Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2003-0468

Published: 27/08/2003 Updated: 11/10/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Subscribe to Postfix

Vulnerability Summary

Postfix 1.1.11 and previous versions allows remote malicious users to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the target IP address and service name followed by a "!" string, which causes Postfix to attempt to use SMTP to communicate with the target on the associated port.

Vulnerable Product Search on Vulmon Subscribe to Product

wietse venema postfix 2000-02-28

wietse venema postfix 2001-11-15

conectiva linux 7.0

conectiva linux 8.0

wietse venema postfix 1999-09-06

wietse venema postfix 1999-12-31

wietse venema postfix 1.0.21

wietse venema postfix 1.1.11

Vendor Advisories

Debian Security Advisories: DSA-363-1 postfix -- denial of service, bounce-scanning
The postfix mail transport agent in Debian 30 contains two vulnerabilities: CAN-2003-0468: Postfix would allow an attacker to bounce-scan private networks or use the daemon as a DDoS tool by forcing the daemon to connect to an arbitrary service at an arbitrary IP address and either receiving a bounce message or observing queue operations to ...

References

NVD-CWE-Otherhttp://www.debian.org/security/2003/dsa-363http://www.redhat.com/support/errata/RHSA-2003-251.htmlhttp://www.novell.com/linux/security/advisories/2003_033_postfix.htmlhttp://www.securityfocus.com/bid/8333http://secunia.com/advisories/9433http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000717http://www.mandriva.com/security/advisories?name=MDKSA-2003:081http://marc.info/?l=bugtraq&m=106001525130257&w=2https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A522https://nvd.nist.govhttps://www.debian.org/security/./dsa-363
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3661open redirectCVE-2024-25512CVE-2024-33788command injectionSSTICVE-2024-0043CVE-2024-29210CVE-2024-25510
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook