Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (1) a malformed envelope address to a local host that would generate a bounce and contains the ".!" string in the MAIL FROM or Errors-To headers, which causes nqmgr to lock up, or (2) via a valid MAIL FROM with a RCPT TO containing a ".!" string, which causes an instance of the SMTP listener to lock up.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Postfix多个远程拒绝服务攻击漏洞
Vulnerability Description
Postfix是一款邮件服务程序。 Postfix邮件传输代理当前存在两个漏洞，远程攻击者可以利用这些漏洞对服务程序进行拒绝服务攻击或把Postfix作为DDOS攻击代理。 第一个漏洞是允许攻击者通过"bounce-scan"方法扫描私有保护的网络，攻击者可以提交如下类型的地址 触发： <[server_ip]:service!@local-host-name> 这个地址会使Postfix连接任意IP地址及任意端口进行SMTP对话，对话失败的信息会反回给远程用户，导致敏感信息泄露。使用这个问题可产生拒绝服
CVSS Information
N/A
Vulnerability Type
N/A