SB2001111101 - Remote denial of service in Postfix
Published: November 11, 2001 Updated: June 8, 2025
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Resource exhaustion (CVE-ID: CVE-2001-0894)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to application does not properly control consumption of internal resources when configured to email the postmaster when SMTP errors cause the session to terminate. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000439
- http://frontal2.mandriva.com/security/advisories?name=MDKSA-2001:089
- http://marc.info/?l=bugtraq&m=100584160110303&w=2
- http://www.debian.org/security/2001/dsa-093
- http://www.redhat.com/support/errata/RHSA-2001-156.html
- http://www.securityfocus.com/bid/3544
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7568