fkie_cve-2003-0468
Vulnerability from fkie_nvd
Published
2003-08-27 04:00
Modified
2025-04-03 01:03
Severity ?
Summary
Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the target IP address and service name followed by a "!" string, which causes Postfix to attempt to use SMTP to communicate with the target on the associated port.
References
cve@mitre.orghttp://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000717
cve@mitre.orghttp://marc.info/?l=bugtraq&m=106001525130257&w=2
cve@mitre.orghttp://secunia.com/advisories/9433
cve@mitre.orghttp://www.debian.org/security/2003/dsa-363Patch, Vendor Advisory
cve@mitre.orghttp://www.mandriva.com/security/advisories?name=MDKSA-2003:081
cve@mitre.orghttp://www.novell.com/linux/security/advisories/2003_033_postfix.html
cve@mitre.orghttp://www.redhat.com/support/errata/RHSA-2003-251.html
cve@mitre.orghttp://www.securityfocus.com/bid/8333
cve@mitre.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A522
af854a3a-2127-422b-91ae-364da2661108http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000717
af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=106001525130257&w=2
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/9433
af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2003/dsa-363Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.mandriva.com/security/advisories?name=MDKSA-2003:081
af854a3a-2127-422b-91ae-364da2661108http://www.novell.com/linux/security/advisories/2003_033_postfix.html
af854a3a-2127-422b-91ae-364da2661108http://www.redhat.com/support/errata/RHSA-2003-251.html
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/8333
af854a3a-2127-422b-91ae-364da2661108https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A522
Impacted products
Vendor Product Version
wietse_venema postfix 1.0.21
wietse_venema postfix 1.1.11
wietse_venema postfix 1999-09-06
wietse_venema postfix 1999-12-31
wietse_venema postfix 2000-02-28
wietse_venema postfix 2001-11-15
conectiva linux 7.0
conectiva linux 8.0


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:wietse_venema:postfix:1.0.21:*:*:*:*:*:*:*",
              "matchCriteriaId": "F8C70650-45F8-42F1-863E-C14CFD27986D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wietse_venema:postfix:1.1.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "6886742C-C8CF-4DE8-812C-30CB19984329",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wietse_venema:postfix:1999-09-06:*:*:*:*:*:*:*",
              "matchCriteriaId": "D8F498EC-BAB8-44E9-A1E9-F5FE59D969E7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wietse_venema:postfix:1999-12-31:*:*:*:*:*:*:*",
              "matchCriteriaId": "3AC09670-77D3-40B7-BD0A-2F447FAB272E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wietse_venema:postfix:2000-02-28:*:*:*:*:*:*:*",
              "matchCriteriaId": "711ECD8D-66D7-414E-B509-9F10A93FCED8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wietse_venema:postfix:2001-11-15:*:*:*:*:*:*:*",
              "matchCriteriaId": "0C6E6C91-AE96-481F-92F5-C56F45ABE8E3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:conectiva:linux:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "97177EF7-8FC4-4D4D-A8D9-3628AA0035FB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:conectiva:linux:8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "CD14661C-E3BE-44DF-BC8D-294322BF23EA",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct \"bounce scans\" or DDos attacks of other hosts via an email address to the local host containing the target IP address and service name followed by a \"!\" string, which causes Postfix to attempt to use SMTP to communicate with the target on the associated port."
    },
    {
      "lang": "es",
      "value": "Postfix 1.1.11 y anteriores permite a atacantes remotos usar Postfix para llevar a cabo \"escaneos de rebote\" o ataques de denegaci\u00f3n de servicio distribuidos (DDoS) contra otras m\u00e1quinas mediante una direcci\u00f3n de correo electr\u00f3nico a la m\u00e1quina local que contenga la direcci\u00f3n IP objetivo y el nombre del servicio seguido de una cadena \"!\", lo que hace que Postfix intente usar SMTP para comunicarse con el objetivo en el puerto asociado."
    }
  ],
  "id": "CVE-2003-0468",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2003-08-27T04:00:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000717"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://marc.info/?l=bugtraq\u0026m=106001525130257\u0026w=2"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/9433"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.debian.org/security/2003/dsa-363"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2003:081"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.novell.com/linux/security/advisories/2003_033_postfix.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2003-251.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/8333"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A522"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000717"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=bugtraq\u0026m=106001525130257\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/9433"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.debian.org/security/2003/dsa-363"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2003:081"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.novell.com/linux/security/advisories/2003_033_postfix.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2003-251.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/8333"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A522"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.