Login Request a demo
Unscored severity · published Aug 27, 2003
CVE-2003-0468
Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the…
–
CVSS
2.4%
EPSS
No
On KEV
Description
Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the target IP address and service name followed by a "!" string, which causes Postfix to attempt to use SMTP to communicate with the target on the associated port.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Linux · Conectiva
7.0; 8.0 · source: NVD
PO
Postfix · Wietse Venema
1.0.21; 1.1.11; 1999-09-06; 1999-12-31; 2000-02-28; 2001-11-15 · source: NVD
Affected product
LI
Linux
Conectiva
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0468
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0468
distro.conectiva.com.br
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000717
marc.info
http://marc.info/?l=bugtraq&m=106001525130257&w=2
secunia.com
http://secunia.com/advisories/9433
Patch
http://www.debian.org/security/2003/dsa-363
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDKSA-2003:081
www.novell.com
http://www.novell.com/linux/security/advisories/2003_033_postfix.html
More from Linux
9.8
CVE-2002-0083
Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges
–
CVE-2005-3626
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted…
–
CVE-2005-3625
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams…
–
CVE-2005-3624
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via…
–
CVE-2005-0207
Unknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.x allows NFS clients to cause a denial of service via O_DIRECT