Every CVESearch/Get API key

CVE-2005-0337

Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in...

7.5 HighFix available

Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname.

Exploit likelihood

2.81%Up 1.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used7.5

Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname.

Record
CVE-2005-0337
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE ListNo score

Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname.

Record
CVE-2005-0337
Updated
2026-11-02
EUVDEUVD-2005-0338No score

Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname.

Record
EUVD-2005-0338
Updated
2026-11-03
GitHub AdvisoriesGHSA-5rxq-6r3q-5xj6No score

Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in...

Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname.

Record
GHSA-5rxq-6r3q-5xj6
Updated
2026-11-02
OSVNo score

Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname.

Record
CVE-2005-0337
Updated
2026-11-02
OSVDEBIAN-CVE-2005-0337No score

Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname.

Record
DEBIAN-CVE-2005-0337
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
postfix
Debian:12
before 2.1.4-5
2.1.4-5
postfix
Debian:13
before 2.1.4-5
2.1.4-5
postfix
Debian:14
before 2.1.4-5
2.1.4-5
postfix
Red Hat:enterprise_linux:4::as
before 2:2.1.5-4.2.RHEL4
2:2.1.5-4.2.RHEL4
postfix-debuginfo
Red Hat:enterprise_linux:4::as
before 2:2.1.5-4.2.RHEL4
2:2.1.5-4.2.RHEL4
postfix-pflogsumm
Red Hat:enterprise_linux:4::as
before 2:2.1.5-4.2.RHEL4
2:2.1.5-4.2.RHEL4
postfix
Red Hat:enterprise_linux:4::desktop
before 2:2.1.5-4.2.RHEL4
2:2.1.5-4.2.RHEL4
postfix-debuginfo
Red Hat:enterprise_linux:4::desktop
before 2:2.1.5-4.2.RHEL4
2:2.1.5-4.2.RHEL4
postfix-pflogsumm
Red Hat:enterprise_linux:4::desktop
before 2:2.1.5-4.2.RHEL4
2:2.1.5-4.2.RHEL4
postfix
Red Hat:enterprise_linux:4::es
before 2:2.1.5-4.2.RHEL4
2:2.1.5-4.2.RHEL4
Show 5 moreShow less
Affected packages
PackageAffectedFixed
postfix-debuginfo
Red Hat:enterprise_linux:4::es
before 2:2.1.5-4.2.RHEL4
2:2.1.5-4.2.RHEL4
postfix-pflogsumm
Red Hat:enterprise_linux:4::es
before 2:2.1.5-4.2.RHEL4
2:2.1.5-4.2.RHEL4
postfix
Red Hat:enterprise_linux:4::ws
before 2:2.1.5-4.2.RHEL4
2:2.1.5-4.2.RHEL4
postfix-debuginfo
Red Hat:enterprise_linux:4::ws
before 2:2.1.5-4.2.RHEL4
2:2.1.5-4.2.RHEL4
postfix-pflogsumm
Red Hat:enterprise_linux:4::ws
before 2:2.1.5-4.2.RHEL4
2:2.1.5-4.2.RHEL4

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-0337 is a high vulnerability (CVSS 7.5) in Wietse Venema Postfix, published February 10, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.81%, the 86th percentile. Fixed in postfix 2.1.4-5.

References

Show 13 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open