CVE-2003-0468

Name	CVE-2003-0468
Description	Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the target IP address and service name followed by a "!" string, which causes Postfix to attempt to use SMTP to communicate with the target on the associated port.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DSA-363

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
postfix (PTS)	jessie, jessie (lts)	2.11.3-1+deb8u3	fixed
	stretch (lts), stretch	3.1.15-0+deb9u2	fixed
	buster (security), buster, buster (lts)	3.4.23-0+deb10u2	fixed
	bullseye	3.5.25-0+deb11u1	fixed
	bookworm	3.7.11-0+deb12u1	fixed
	sid, trixie	3.9.0-3	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
postfix	source	woody	1.1.11-0.woody3		DSA-363
postfix	source	(unstable)	1.1.12