Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the target IP address and service name followed by a "!" string, which causes Postfix to attempt to use SMTP to communicate with the target on the associated port.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Postfix多个远程拒绝服务攻击漏洞
Vulnerability Description
Postfix是一款邮件服务程序。 Postfix邮件传输代理当前存在两个漏洞，远程攻击者可以利用这些漏洞对服务程序进行拒绝服务攻击或把Postfix作为DDOS攻击代理。 第一个漏洞是允许攻击者通过"bounce-scan"方法扫描私有保护的网络，攻击者可以提交如下类型的地址 触发： <[server_ip]:service!@local-host-name> 这个地址会使Postfix连接任意IP地址及任意端口进行SMTP对话，对话失败的信息会反回给远程用户，导致敏感信息泄露。使用这个问题可产生拒绝服
CVSS Information
N/A
Vulnerability Type
N/A