Approved changes feed: RSS · Atom

cpe:2.3:a:wietse_venema:postfix:1.1.12:*:*:*:*:*:*:*

part: a version: 1.1.12 update: *

VendorWietse Venema (586f595e-a277-5f6d-a807-d7208ee374ed)
ProductPostfix (77ab0f3b-2de5-58ed-97fa-0309e4e8f650)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/postfix purl2cpe 2026-06-01 10:15:13.821834
pkg:deb/ubuntu/postfix purl2cpe 2026-06-01 10:15:13.821835
pkg:github/vdukhovni/postfix purl2cpe 2026-06-01 10:15:13.821837
pkg:gitlab/redhat/postfix purl2cpe 2026-06-01 10:15:13.821838
pkg:rpm/fedora/postfix purl2cpe 2026-06-01 10:15:13.821839
pkg:rpm/opensuse/postfix purl2cpe 2026-06-01 10:15:13.821841

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2003-0540 vulnerable 2026-06-08 04:47:21.773046 Details available
The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (1) a malformed envelope address to a local host that would generate a bounce and contains the ".!" string in the MAIL FROM or Errors-To headers, which causes nqmgr to lock up, or (2) via a valid MAIL FROM with a RCPT TO containing a ".!" string, which causes an instance of the SMTP listener to lock up.
Published: 2003-08-05T04:00:00.000Z
Updated: 2024-08-08T01:58:10.982Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.