PT-2005-1415 · Postfix+1 · Postfix+1

Jean-Samuel Reynaud · Published 2005-02-10 · Updated 2017-10-11 · CVE-2005-0337

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Postfix version 2.1.3

Description The issue allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname, when /proc/net/if inet6 is not available and permit mx backup is enabled in smtpd recipient restrictions.

Recommendations For Postfix version 2.1.3, consider disabling the permit mx backup option in smtpd recipient restrictions as a temporary workaround to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-0337

RHSA-2005:152

RHSA-2005_152

Affected Products

Postfix

Red Hat

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2005-0337 · Security Note
• http://secunia.com/advisories/14137 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0337 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-152.html · Vendor Advisory
• http://securityfocus.com/bid/12445 · Patch
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=267837 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-0337 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2005-0337 · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2005-152.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11339 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19218 · Note
• http://marc.info/?l=bugtraq&m=110763358832637&w=2 · Note
• https://redhat.com/security/data/cve/CVE-2005-0337.html · Note