CVE

Id
7367  
CVE No.
CVE-2003-0540  
Status
Candidate  
Description
The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (1) a malformed envelope address to a local host that would generate a bounce and contains the ".!" string in the MAIL FROM or Errors-To headers, which causes nqmgr to lock up, or (2) via a valid MAIL FROM with a RCPT TO containing a ".!" string, which causes an instance of the SMTP listener to lock up.  
Phase
Assigned (20030714)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
43178 7367 CVE-2003-0540 BUGTRAQ:20030804 Postfix 1.1.12 remote DoS / Postfix 1.1.11 bounce scanning  View
43179 7367 CVE-2003-0540 URL:http://marc.info/?l=bugtraq&m=106001525130257&w=2  View
43180 7367 CVE-2003-0540 FULLDISC:20030804 Postfix 1.1.12 remote DoS / Postfix 1.1.11 bounce scanning  View
43181 7367 CVE-2003-0540 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2003-August/007693.html  View
43182 7367 CVE-2003-0540 REDHAT:RHSA-2003:251  View
43183 7367 CVE-2003-0540 URL:http://www.redhat.com/support/errata/RHSA-2003-251.html  View
43184 7367 CVE-2003-0540 DEBIAN:DSA-363  View
43185 7367 CVE-2003-0540 URL:http://www.debian.org/security/2003/dsa-363  View
43186 7367 CVE-2003-0540 MANDRAKE:MDKSA-2003:081  View
43187 7367 CVE-2003-0540 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2003:081  View
43188 7367 CVE-2003-0540 SUSE:SuSE-SA:2003:033  View
43189 7367 CVE-2003-0540 URL:http://www.novell.com/linux/security/advisories/2003_033_postfix.html  View
43190 7367 CVE-2003-0540 CONECTIVA:CLA-2003:717  View
43191 7367 CVE-2003-0540 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000717  View
43192 7367 CVE-2003-0540 ENGARDE:ESA-20030804-019  View
43193 7367 CVE-2003-0540 URL:http://www.linuxsecurity.com/advisories/engarde_advisory-3517.html  View
43194 7367 CVE-2003-0540 TRUSTIX:2003-0029  View
43195 7367 CVE-2003-0540 URL:http://marc.info/?l=bugtraq&m=106029188614704&w=2  View
43196 7367 CVE-2003-0540 CERT-VN:VU#895508  View
43197 7367 CVE-2003-0540 URL:http://www.kb.cert.org/vuls/id/895508  View
43198 7367 CVE-2003-0540 BID:8333  View
43199 7367 CVE-2003-0540 URL:http://www.securityfocus.com/bid/8333  View
43200 7367 CVE-2003-0540 OVAL:oval:org.mitre.oval:def:544  View
43201 7367 CVE-2003-0540 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:544  View
43202 7367 CVE-2003-0540 SECUNIA:9433  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63539 JVNDB-2003-000265 GtkHTML における意図的に作成された HTML 形式の電子メールによるサービス運用妨害 (DoS) の脆弱性 GtkHTML には、HTML 形式の電子メールの取り扱いの不備のため、特定の HTML 形式の電子メールを読み込んだ場合、GtkHTML ライブラリ内で NULL ポインタによる参照読み出しが行われ、Evolution がクラッシュしてしまう脆弱性が存在します。 CVE-2003-0541 7367 5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000265.html  View