Postfix vulnerability

2008-09-1000:00:00

ubuntu.com

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.2%

JSON

Releases

Ubuntu 8.04
Ubuntu 7.10

Packages

postfix -

Details

Wietse Venema discovered that Postfix leaked internal file descriptors
when executing non-Postfix commands. A local attacker could exploit
this to cause Postfix to run out of descriptors, leading to a denial
of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.04noarchpostfix< 2.5.1-2ubuntu1.2UNKNOWN
Ubuntu8.04noarchpostfix-cdb< 2.5.1-2ubuntu1.2UNKNOWN
Ubuntu8.04noarchpostfix-ldap< 2.5.1-2ubuntu1.2UNKNOWN
Ubuntu8.04noarchpostfix-mysql< 2.5.1-2ubuntu1.2UNKNOWN
Ubuntu8.04noarchpostfix-pcre< 2.5.1-2ubuntu1.2UNKNOWN
Ubuntu8.04noarchpostfix-pgsql< 2.5.1-2ubuntu1.2UNKNOWN
Ubuntu7.10noarchpostfix< 2.4.5-3ubuntu1.3UNKNOWN
Ubuntu7.10noarchpostfix-cdb< 2.4.5-3ubuntu1.3UNKNOWN
Ubuntu7.10noarchpostfix-ldap< 2.4.5-3ubuntu1.3UNKNOWN
Ubuntu7.10noarchpostfix-mysql< 2.4.5-3ubuntu1.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	8.04	noarch	postfix	< 2.5.1-2ubuntu1.2	UNKNOWN
Ubuntu	8.04	noarch	postfix-cdb	< 2.5.1-2ubuntu1.2	UNKNOWN
Ubuntu	8.04	noarch	postfix-ldap	< 2.5.1-2ubuntu1.2	UNKNOWN
Ubuntu	8.04	noarch	postfix-mysql	< 2.5.1-2ubuntu1.2	UNKNOWN
Ubuntu	8.04	noarch	postfix-pcre	< 2.5.1-2ubuntu1.2	UNKNOWN
Ubuntu	8.04	noarch	postfix-pgsql	< 2.5.1-2ubuntu1.2	UNKNOWN
Ubuntu	7.10	noarch	postfix	< 2.4.5-3ubuntu1.3	UNKNOWN
Ubuntu	7.10	noarch	postfix-cdb	< 2.4.5-3ubuntu1.3	UNKNOWN
Ubuntu	7.10	noarch	postfix-ldap	< 2.4.5-3ubuntu1.3	UNKNOWN
Ubuntu	7.10	noarch	postfix-mysql	< 2.4.5-3ubuntu1.3	UNKNOWN