CVE catalog

CVE-2009-4404

t-prot: CVE-2009-4404

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
1.21% · Oct 25, 2026

Unspecified vulnerability in t-prot (TOFU Protection) before 2.8 allows remote attackers to cause a denial of service via unspecified vectors related to the "--maxlines" option and a crafted email message. NOTE: some of these details are obtained from third party information.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiant-protsid3.4-4.2fixed
Debiant-protforky3.4-4.2fixed
Debiant-prottrixie3.4-4.1fixed
Debiant-protbookworm3.4-4.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiant-protsourcesid2.8-1lowNot reportedNot reported
Debiant-protsourceforky2.8-1lowNot reportedNot reported
Debiant-protsourcetrixie2.8-1lowNot reportedNot reported
Debiant-protsourcebookworm2.8-1lowNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [t-prot]Fixed
    Details (2)
    • 3.4-4.1 · all · bookworm

      Fixed · Fixed: 2.8-1

      dsa · t-prot · debian · bookworm; dsa · t-prot · debian · 12

    • 3.4-4.1 · all · bookworm

      Fixed · Fixed: 2.8-1

      dsa · t-prot · debian · bookworm; dsa · t-prot · debian · 12

[Debian 13 (Trixie)]

  • [t-prot]Fixed
    Details (2)
    • 3.4-4.1 · all · trixie

      Fixed · Fixed: 2.8-1

      dsa · t-prot · debian · 13

    • 3.4-4.1 · all · trixie

      Fixed · Fixed: 2.8-1

      dsa · t-prot · debian · 13

Observed:

References