Oval Definition:oval:org.mitre.oval:def:522
Revision Date:2010-09-20Version:21
Title:Postfix Bounce Scans Vulnerability
Description:Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the target IP address and service name followed by a "!" string, which causes Postfix to attempt to use SMTP to communicate with the target on the associated port.
Family:unixClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2003-0468
Platform(s):Red Hat Linux 9
Product(s):Postfix
Definition Synopsis
  • Software section
  • Red Hat 9 is installed
  • AND ix86 architecture
  • AND postfix version is less than 1.1.12-1
  • AND Configuration section
  • smtpd listens on the network
  • BACK