Every CVE Search/ Get API key

CVE-2005-0337

Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in...

7.5 HighFix available

CVE-2005-0337 is a high vulnerability (CVSS 7.5) in Wietse Venema Postfix, published February 10, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.81%, the 86th percentile. Fixed in postfix 2.1.4-5.

Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname.

Exploit likelihood

2.81%Up 1.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname.

Record
CVE-2005-0337
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname.

Record
CVE-2005-0337
Updated
2026-11-02
EUVDEUVD-2005-0338 No score

Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname.

Record
EUVD-2005-0338
Updated
2026-11-03
GitHub AdvisoriesGHSA-5rxq-6r3q-5xj6 No score

Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in...

Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname.

Record
GHSA-5rxq-6r3q-5xj6
Updated
2026-11-02
OSV No score

Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname.

Record
CVE-2005-0337
Updated
2026-11-02
OSVDEBIAN-CVE-2005-0337 No score

Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname.

Record
DEBIAN-CVE-2005-0337
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
postfix
Debian:12
 before 2.1.4-5
2.1.4-5
postfix
Debian:13
 before 2.1.4-5
2.1.4-5
postfix
Debian:14
 before 2.1.4-5
2.1.4-5
postfix
Red Hat:enterprise_linux:4::as
 before 2:2.1.5-4.2.RHEL4
2:2.1.5-4.2.RHEL4
postfix-debuginfo
Red Hat:enterprise_linux:4::as
 before 2:2.1.5-4.2.RHEL4
2:2.1.5-4.2.RHEL4
postfix-pflogsumm
Red Hat:enterprise_linux:4::as
 before 2:2.1.5-4.2.RHEL4
2:2.1.5-4.2.RHEL4
postfix
Red Hat:enterprise_linux:4::desktop
 before 2:2.1.5-4.2.RHEL4
2:2.1.5-4.2.RHEL4
postfix-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 2:2.1.5-4.2.RHEL4
2:2.1.5-4.2.RHEL4
postfix-pflogsumm
Red Hat:enterprise_linux:4::desktop
 before 2:2.1.5-4.2.RHEL4
2:2.1.5-4.2.RHEL4
postfix
Red Hat:enterprise_linux:4::es
 before 2:2.1.5-4.2.RHEL4
2:2.1.5-4.2.RHEL4
Show 5 moreShow less
Affected packages
PackageAffectedFixed
postfix-debuginfo
Red Hat:enterprise_linux:4::es
 before 2:2.1.5-4.2.RHEL4
2:2.1.5-4.2.RHEL4
postfix-pflogsumm
Red Hat:enterprise_linux:4::es
 before 2:2.1.5-4.2.RHEL4
2:2.1.5-4.2.RHEL4
postfix
Red Hat:enterprise_linux:4::ws
 before 2:2.1.5-4.2.RHEL4
2:2.1.5-4.2.RHEL4
postfix-debuginfo
Red Hat:enterprise_linux:4::ws
 before 2:2.1.5-4.2.RHEL4
2:2.1.5-4.2.RHEL4
postfix-pflogsumm
Red Hat:enterprise_linux:4::ws
 before 2:2.1.5-4.2.RHEL4
2:2.1.5-4.2.RHEL4

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 13 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open