postfix -- plaintext command injection with SMTP over TLS

2011-03-0700:00:00

vuxml.freebsd.org

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

84.5%

JSON

Wietse Venema has discovered a software flaw that allows
an attacker to inject client commands into an SMTP session
during the unprotected plaintext SMTP protocol phase, such
that the server will execute those commands during the SMTP-
over-TLS protocol phase when all communication is supposed
to be protected.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchpostfix= 2.7.*,1UNKNOWN
FreeBSDanynoarchpostfix< 2.7.3,1UNKNOWN
FreeBSDanynoarchpostfix-base= 2.7.*,1UNKNOWN
FreeBSDanynoarchpostfix-base< 2.7.3,1UNKNOWN
FreeBSDanynoarchpostfix-current< 2.9.20100120,4UNKNOWN
FreeBSDanynoarchpostfix-current-base< 2.9.20100120,4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	postfix	= 2.7.*,1	UNKNOWN
FreeBSD	any	noarch	postfix	< 2.7.3,1	UNKNOWN
FreeBSD	any	noarch	postfix-base	= 2.7.*,1	UNKNOWN
FreeBSD	any	noarch	postfix-base	< 2.7.3,1	UNKNOWN
FreeBSD	any	noarch	postfix-current	< 2.9.20100120,4	UNKNOWN
FreeBSD	any	noarch	postfix-current-base	< 2.9.20100120,4	UNKNOWN