Description
Vulnerability in Postfix SMTP server before 20010228-pl07, when configured to email the postmaster when SMTP errors cause the session to terminate, allows remote attackers to cause a denial of service (memory exhaustion) by generating a large number of SMTP errors, which forces the SMTP session log to grow too large.
References
- DSA-093 vendor-advisory
- 3544 vdb-entry
- CLA-2001:439 vendor-advisory
- MDKSA-2001:089 vendor-advisory
- RHSA-2001:156 vendor-advisory
- postfix-smtp-log-dos(7568) vdb-entry
- 20011115 Postfix session log memory exhaustion bugfix mailing-list