CVE-2003-0540

Home/CVE/The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (1

CVE

The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (1

The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (1) a malformed envelope address to a local host that would generate a bounce and contains the ".!" string in the MAIL FROM or Errors-To headers, which causes nqmgr to lock up, or (2) via a valid MAIL FROM with a RCPT TO containing a ".!" string, which causes an instance of the SMTP listener to lock up.

MEDIUM · CVSS 5 EPSS 0.57494

Act now

EPSS ≥ 0.50 - high probability of exploitation in the next 30 days
EPSS percentile: top 2% of all CVEs by exploitation likelihood
Public exploit or PoC is available

Sigma rules8 YARA rules0

▤

Affected Products & Versions

wietse venema postfixall versions

conectiva linuxall versions

⚠

Public Exploits & PoCs

dosPostfix 1.1.x - Denial of Service (1)verified

dosPostfix 1.1.x - Denial of Service (2)verified

◈

Sigma Hunt Rules

Exact rules name this CVE ID. Product rules name an affected product in their title. Related rules cover techniques used by actors who exploited this CVE. Showing the most relevant matches; the complete related set is on the full drill-down.

productcriticalLinux Reverse Shell Indicator

producthighCommunication To LocaltoNet Tunneling Service Initiated - Linux

producthighPotentially Suspicious Malware Callback Communication - Linux

producthighLinux Crypto Mining Pool Connections

producthighCommunication To Ngrok Tunneling Service - Linux

producthighLinux Crypto Mining Indicators

Show all 8 top matches

producthighShell Execution GCC - Linux

producthighShell Execution via Rsync - Linux

▣