NVD

Id
73664  
Name
CVE-2003-0540  
Description
The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (1) a malformed envelope address to a local host that would generate a bounce and contains the ".!" string in the MAIL FROM or Errors-To headers, which causes nqmgr to lock up, or (2) via a valid MAIL FROM with a RCPT TO containing a ".!" string, which causes an instance of the SMTP listener to lock up.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-03  
Published
2003-08-27  
Modified Date
2016-10-17  
Seq
2003-0540  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
379010 73664 CVE-2003-0540 CLA-2003:717  View
379011 73664 CVE-2003-0540 20030804 Postfix 1.1.12 remote DoS / Postfix 1.1.11 bounce scanning  View
379012 73664 CVE-2003-0540 20030804 Postfix 1.1.12 remote DoS / Postfix 1.1.11 bounce scanning  View
379013 73664 CVE-2003-0540 2003-0029  View
379014 73664 CVE-2003-0540 oval:org.mitre.oval:def:544  View
379015 73664 CVE-2003-0540 DSA-363  View
379016 73664 CVE-2003-0540 VU#895508  View
379017 73664 CVE-2003-0540 ESA-20030804-019  View
379018 73664 CVE-2003-0540 MDKSA-2003:081  View
379019 73664 CVE-2003-0540 SuSE-SA:2003:033  View
379020 73664 CVE-2003-0540 RHSA-2003:251  View
379021 73664 CVE-2003-0540 8333  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63513 JVNDB-2003-000239 Postfix のメールアドレス解析部におけるサービス運用妨害 (DoS) の脆弱性 Postfix が実装するメールアドレス解析部分のコードに、メールアドレスの妥当性に対するチェックが不適切であるため、メールヘッダ内に意図的なメールアドレスを含む電子メールを標的ホストに送りつけることで、Postfix キューマネージャ (nqmgr) がサービス不能状態 (DoS) となる脆弱性が存在します。 CVE-2003-0540 7366 CVE-2003-0540 73664 5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000239.html 2003-08-04 2007-04-01 View