NetSight
IP …
medium5.0Public exploit code

CVE-2003-0540

The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (1) a malformed envelope address to a loc…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (1) a malformed envelope address to a local host that would generate a bounce and contains the ".!" string in the MAIL FROM or Errors-To headers, which causes nqmgr to lock up, or (2) via a valid MAIL FROM with a RCPT TO containing a ".!" string, which causes an instance of the SMTP listener to lock up.

Affected products

VendorProductAffected versions
Wietse VenemaPostfix
Versions 1.0.21, 1.1.11, 1.1.12, 1999-09-06, 1999-12-31, 2000-02-28
ConectivaLinux
Versions 7.0, 8.0

References