CVE-2009-4404: Unspecified vulnerability in t-prot (TOFU Protection) before 2.8 allows remote attackers to cause a denial...

Security readout for executives and security teams

CVE-2009-4404 is a denial-of-service issue in t-prot before version 2.8. A specially crafted email can reportedly disrupt processing through behavior related to the --maxlines option. The public record is sparse and partly based on third-party reporting, so urgency depends on whether t-prot is actually used in mail workflows. Exposure is likely limited to environments that run t-prot before 2.8 against inbound or otherwise untrusted email, especially configurations using or enabling --maxlines behavior. The bundle does not identify operating systems, distributions, or packaged products. Treat this as a targeted hygiene item, not an emergency, unless t-prot is part of critical mail processing. Prioritize quick inventory and upgrade because the issue is old, remotely triggerable, and documentation is limited. Mitigation focus: Inventory any systems running t-prot and identify versions before 2.8.; Upgrade t-prot to 2.8 or later where vendor packaging supports it.; Review mail-processing configurations that invoke t-prot with --maxlines..

Prepared

Jun 28, 2026, 09:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.