Unscored severity · published Nov 11, 2001
CVE-2001-0894
Vulnerability in Postfix SMTP server before 20010228-pl07, when configured to email the postmaster when SMTP errors cause the session to terminate, allows remote attackers to…
–
CVSS
1.9%
EPSS
No
On KEV
Description
Vulnerability in Postfix SMTP server before 20010228-pl07, when configured to email the postmaster when SMTP errors cause the session to terminate, allows remote attackers to cause a denial of service (memory exhaustion) by generating a large number of SMTP errors, which forces the SMTP session log to grow too large.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PO
Postfix · Wietse Venema
1999-09-06; 1999-12-31; 2000-02-28 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-0894
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-0894
distro.conectiva.com.br
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000439
frontal2.mandriva.com
http://frontal2.mandriva.com/security/advisories?name=MDKSA-2001:089
marc.info
http://marc.info/?l=bugtraq&m=100584160110303&w=2
Patch
http://www.debian.org/security/2001/dsa-093
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2001-156.html
Patch
http://www.securityfocus.com/bid/3544
More from Postfix
–
CVE-2005-0337
Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions, allows remote attackers to bypass e-mail restrictions and…
–
CVE-2003-0468
Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the…
–
CVE-2003-0540
The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (1) a malformed envelope address to a local host that would…