CVE-2003-0540
5.0
CVSS v2.0 Base Score
57.49%
MEDIUM RiskEPSS (98th percentile)
NVD-CWE-Other
The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (1) a malformed envelope address to a local host that would generate a bounce and contains the ".!" string in the MAIL FROM or Errors-To headers, which causes nqmgr to lock up, or (2) via a valid MAIL FROM with a RCPT TO containing a ".!" string, which causes an instance of the SMTP listener to lock up.
Published: 8/27/2003
Modified: 4/16/2026
Vulnerability Summary
CVSS v2 Score
5
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS Score (Exploitation Probability)
57.49%MEDIUM Exploitation Risk
98th percentile
This vulnerability has a 57.49% probability of being exploited in the next 30 days, ranking higher than 98% of all scored CVEs.
CWE Classification
NVD-CWE-Other