CVE-2003-0468

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2003-08-27 · updated 2026-06-16

Description

Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the target IP address and service name followed by a "!" string, which causes Postfix to attempt to use SMTP to communicate with the target on the associated port.

Affected products

Conectiva Linux: 7.0, 8.0
Wietse Venema Postfix: 1.0.21, 1.1.11, 1999-09-06, 1999-12-31, 2000-02-28, 2001-11-15

References

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000717
http://marc.info/?l=bugtraq&m=106001525130257&w=2
http://secunia.com/advisories/9433
http://www.debian.org/security/2003/dsa-363
http://www.mandriva.com/security/advisories?name=MDKSA-2003:081
http://www.novell.com/linux/security/advisories/2003_033_postfix.html
http://www.redhat.com/support/errata/RHSA-2003-251.html
http://www.securityfocus.com/bid/8333
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A522
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000717
http://marc.info/?l=bugtraq&m=106001525130257&w=2
http://secunia.com/advisories/9433

Get alerted when CVE-2003-0468 or the next vulnerability affects your stack