CVE-2003-0468

2003-08-2704:00:00

Debian Security Bug Tracker

security-tracker.debian.org

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.026 Low

EPSS

Percentile

90.5%

JSON

Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct “bounce scans” or DDos attacks of other hosts via an email address to the local host containing the target IP address and service name followed by a “!” string, which causes Postfix to attempt to use SMTP to communicate with the target on the associated port.

OSVersionArchitecturePackageVersionFilename
Debian12allpostfix< 1.1.12postfix_1.1.12_all.deb
Debian11allpostfix< 1.1.12postfix_1.1.12_all.deb
Debian999allpostfix< 1.1.12postfix_1.1.12_all.deb
Debian13allpostfix< 1.1.12postfix_1.1.12_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	postfix	< 1.1.12	postfix_1.1.12_all.deb
Debian	11	all	postfix	< 1.1.12	postfix_1.1.12_all.deb
Debian	999	all	postfix	< 1.1.12	postfix_1.1.12_all.deb
Debian	13	all	postfix	< 1.1.12	postfix_1.1.12_all.deb