CVE-2003-0540: conectiva linux
Vulnerability summary
CVE-2003-0540 is a medium (CVSS 5.0) vulnerability in conectiva linux. EPSS estimates a 21.26% chance of exploitation in the next 30 days, higher than 97.5% of scored vulnerabilities. 2 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 05-08-2003PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (1) a malformed envelope address to a local host that would generate a bounce and contains the ".!" string in the MAIL FROM or Errors-To headers, which causes nqmgr to lock up, or (2) via a valid MAIL FROM with a RCPT TO containing a ".!" string, which causes an instance of the SMTP listener to lock up.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
21.26%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 21.26% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundPostfix 1.1.x - Denial of Service (1)
Maturity: poc
Postfix 1.1.x - Denial of Service (2)
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Conectiva1 product
- linux7.0 | 8.0
Debian1 product
- postfix< 1.1.12
Wietse_venema1 product
- postfix1.0.21 | 1.1.11 | 1.1.12 | 1999-09-06 | 1999-12-31 | 2000-02-28 | 2001-11-15
3 vendors · 3 products
References
14 linksShow all 14 references
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A544VDB EntrySignatureX Refsource OVAL
