CVE-2005-2151
spf.c in Courier Mail Server does not properly handle DNS failures when looking up Sender Policy...
spf.c in Courier Mail Server does not properly handle DNS failures when looking up Sender Policy Framework (SPF) records, which could allow attackers to cause memory corruption.
Exploit likelihood
What each source reports
NVD Score used
spf.c in Courier Mail Server does not properly handle DNS failures when looking up Sender Policy Framework (SPF) records, which could allow attackers to cause memory corruption.
- Record
CVE-2005-2151- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
spf.c in Courier Mail Server does not properly handle DNS failures when looking up Sender Policy Framework (SPF) records, which could allow attackers to cause memory corruption.
- Record
CVE-2005-2151- Updated
- 2026-11-02
EUVDEUVD-2005-2152 No score
spf.c in Courier Mail Server does not properly handle DNS failures when looking up Sender Policy Framework (SPF) records, which could allow attackers to cause memory corruption.
- Record
EUVD-2005-2152- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j458-3qc3-3hff No score
spf.c in Courier Mail Server does not properly handle DNS failures when looking up Sender Policy...
spf.c in Courier Mail Server does not properly handle DNS failures when looking up Sender Policy Framework (SPF) records, which could allow attackers to cause memory corruption.
- Record
GHSA-j458-3qc3-3hff- Updated
- 2026-11-02
OSV No score
spf.c in Courier Mail Server does not properly handle DNS failures when looking up Sender Policy Framework (SPF) records, which could allow attackers to cause memory corruption.
- Record
CVE-2005-2151- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-2151 No score
spf.c in Courier Mail Server does not properly handle DNS failures when looking up Sender Policy Framework (SPF) records, which could allow attackers to cause memory corruption.
- Record
DEBIAN-CVE-2005-2151- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-2151 is a medium vulnerability (CVSS 5.0) in Double Precision Incorporated Courier Mail Server, published July 6, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.92%, the 60th percentile. Fixed in courier 0.47-6.