CVE-2001-0894: Medium severity Wietse Venema Postfix vulnerability
Vulnerability in Postfix SMTP server before 20010228-pl07, when configured to email the postmaster when SMTP errors cause the session to terminate, allows remote attackers to cause a denial of service (memory exhaustion) by generating a large number of SMTP errors, which forces the SMTP session log to grow too large.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2001-0894?
CVE-2001-0894 has a high severity as it can lead to a denial of service through memory exhaustion.
How do I fix CVE-2001-0894?
To fix CVE-2001-0894, upgrade your Postfix SMTP server to version 20010228-pl07 or later.
What software is affected by CVE-2001-0894?
CVE-2001-0894 affects Postfix versions before 20010228-pl07, specifically versions 2000-02-28, 1999-12-31, and 1999-09-06.
What attack vector is exploited in CVE-2001-0894?
CVE-2001-0894 can be exploited remotely by generating a large number of SMTP errors.
What is the impact of CVE-2001-0894?
The impact of CVE-2001-0894 is a denial of service that can disrupt the operation of the affected Postfix server.