CVE-2005-0337

high

Description

Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname.

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11339

https://exchange.xforce.ibmcloud.com/vulnerabilities/19218

http://www.securityfocus.com/bid/12445

http://www.redhat.com/support/errata/RHSA-2005-152.html

http://secunia.com/advisories/14137/

http://marc.info/?l=bugtraq&m=110763358832637&w=2

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=267837

Details

Source: Mitre, NVD

Published: 2005-05-02

Updated: 2025-04-03

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N