SB2001111101 - Remote denial of service in Postfix



SB2001111101 - Remote denial of service in Postfix

Published: November 11, 2001 Updated: June 8, 2025

Security Bulletin ID SB2001111101
Severity
Medium
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Resource exhaustion (CVE-ID: CVE-2001-0894)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to application does not properly control consumption of internal resources when configured to email the postmaster when SMTP errors cause the session to terminate. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.


Remediation

Install update from vendor's website.