CVE-2003-0540
The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial...
CVE-2003-0540 is a medium vulnerability (CVSS 5.0) in Wietse Venema Postfix, published August 3, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 21.3%, the 97th percentile. Fixed in postfix 1.1.12.
The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (1) a malformed envelope address to a local host that would generate a bounce and contains the ".!" string in the MAIL FROM or Errors-To headers, which causes nqmgr to lock up, or (2) via a valid MAIL FROM with a RCPT TO containing a ".!" string, which causes an instance of the SMTP listener to lock up.
Exploit likelihood
What each source reports
NVD Score used
The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (1) a malformed envelope address to a local host that would generate a bounce and contains the ".!" string in the MAIL FROM or Errors-To headers, which causes nqmgr to lock up, or (2) via a valid MAIL FROM with a RCPT TO containing a ".!" string, which causes an instance of the SMTP listener to lock up.
- Record
CVE-2003-0540- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (1) a malformed envelope address to a local host that would generate a bounce and contains the ".!" string in the MAIL FROM or Errors-To headers, which causes nqmgr to lock up, or (2) via a valid MAIL FROM with a RCPT TO containing a ".!" string, which causes an instance of the SMTP listener to lock up.
- Record
CVE-2003-0540- Updated
- 2026-11-02
EUVDEUVD-2003-0534 No score
The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (1) a malformed envelope address to a local host that would generate a bounce and contains the ".!" string in the MAIL FROM or Errors-To headers, which causes nqmgr to lock up, or (2) via a valid MAIL FROM with a RCPT TO containing a ".!" string, which causes an instance of the SMTP listener to lock up.
- Record
EUVD-2003-0534- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cgrr-3rc7-3h4r No score
The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial...
The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (1) a malformed envelope address to a local host that would generate a bounce and contains the ".!" string in the MAIL FROM or Errors-To headers, which causes nqmgr to lock up, or (2) via a valid MAIL FROM with a RCPT TO containing a ".!" string, which causes an instance of the SMTP listener to lock up.
- Record
GHSA-cgrr-3rc7-3h4r- Updated
- 2026-11-02
OSV No score
The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (1) a malformed envelope address to a local host that would generate a bounce and contains the ".!" string in the MAIL FROM or Errors-To headers, which causes nqmgr to lock up, or (2) via a valid MAIL FROM with a RCPT TO containing a ".!" string, which causes an instance of the SMTP listener to lock up.
- Record
CVE-2003-0540- Updated
- 2026-11-02
OSVDEBIAN-CVE-2003-0540 No score
The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (1) a malformed envelope address to a local host that would generate a bounce and contains the ".!" string in the MAIL FROM or Errors-To headers, which causes nqmgr to lock up, or (2) via a valid MAIL FROM with a RCPT TO containing a ".!" string, which causes an instance of the SMTP listener to lock up.
- Record
DEBIAN-CVE-2003-0540- Updated
- 2026-11-02
Affected products
Affected packages
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Postfix 1.1.x - Denial of Service (1) | 2003-08-04 |
| Exploit-DB | Postfix 1.1.x - Denial of Service (2) | 2003-08-04 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
References
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000717
securityfocus.com/bid/8333
lists.grok.org.uk/pipermail/full-disclosure/2003-August/007693.html
kb.cert.org/vuls/id/895508
marc.info?l=bugtraq&m=106029188614704&w=2
mandriva.com/security/advisories?name=MDKSA-2003:081
Show 10 moreShow less
redhat.com/support/errata/RHSA-2003-251.html
debian.org/security/2003/dsa-363
linuxsecurity.com/advisories/engarde_advisory-3517.html
novell.com/linux/security/advisories/2003_033_postfix.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A544
secunia.com/advisories/9433
nvd.nist.gov/vuln/detail/CVE-2003-0540
github.com/advisories/GHSA-cgrr-3rc7-3h4r
security-tracker.debian.org/tracker/CVE-2003-0540