CVE-2003-0468 Common Vulnerabilities and Exposures

Upstream information

CVE-2003-0468 at MITRE

Description

Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the target IP address and service name followed by a "!" string, which causes Postfix to attempt to use SMTP to communicate with the target on the associated port.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

CVSS v2 Scores
	National Vulnerability Database
Base Score	5
Vector	AV:N/AC:L/Au:N/C:N/I:N/A:P
Access Vector	Network
Access Complexity	Low
Authentication	None
Confidentiality Impact	None
Integrity Impact	None
Availability Impact	Partial

SUSE Bugzilla entry: 43279 [VERIFIED / FIXED]

SUSE Security Advisories:

SuSE-SA:2003:033, published Mon Aug 4 13:30:00 MEST 2003

SUSE Timeline for this CVE

CVE page created: Fri Jun 28 00:23:16 2013
CVE page last modified: Fri Dec 8 16:08:58 2023