1473 matches found
Fedora Update for postfix FEDORA-2011-6777
Check for the Version of postfix OpenVAS Vulnerability Test Fedora Update for postfix FEDORA-2011-6777 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
smtp-vuln-cve2011-1720 NSE Script
Checks for a memory corruption in the Postfix SMTP server when it uses Cyrus SASL library authentication mechanisms CVE-2011-1720. This vulnerability can allow denial of service and possibly remote code execution. Reference: Script Arguments smtp.domain See the documentation for the smtp library...
Fedora 15 : postfix-2.8.3-1.fc15 (2011-6784)
This is an update that fixes memory corruption in Postfix SMTP server Cyrus SASL support CVE-2011-1720. For original upstream announcement see: http://archives.neohapsis.com/archives/postfix/2011-05/0208.html Note that Tenable Network Security has extracted the preceding description block directl...
Postfix Cyrus SASL Authentication Context Data Reuse Memory Corruption
According to its banner, the version of the Postfix mail server listening on this port is earlier than 2.5.13, 2.6.19, 2.7.4, or 2.8.3. Such versions may be vulnerable to a memory corruption attack if they have Cyrus SASL enabled and are allowing authentication methods other than ANONYMOUS, LOGIN...
Postfix Cyrus SASL Authentication Context Data Reuse Memory Corruption (exploit)
The Postfix mail server listening on this port appears vulnerable to a memory corruption attack as Nessus was able to crash an SMTP session with this host by using two different authentication methods in one session. Note that code execution as the unprivileged postfix user may also be possible. ...
Fedora 13 : postfix-2.7.4-1.fc13 (2011-6777)
This is an update that fixes memory corruption in Postfix SMTP server Cyrus SASL support CVE-2011-1720. For original upstream announcement see: http://archives.neohapsis.com/archives/postfix/2011-05/0208.html Note that Tenable Network Security has extracted the preceding description block directl...
Mandriva Linux Security Advisory : postfix (MDVSA-2011:090)
A vulnerability has been found and corrected in postfix : The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails,...
[SECURITY] Fedora 13 Update: postfix-2.7.4-1.fc13
Postfix is a Mail Transport Agent MTA, supporting LDAP, SMTP AUTH SASL, TLS...
Ubuntu: Security Advisory (USN-1131-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2011-1720
The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails, which allows remote attackers to cause a denial of service...
Memory corruption
The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails, which allows remote attackers to cause a denial of service...
CVE-2011-1720
The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails, which allows remote attackers to cause a denial of service...
Postfix SMTP Server Cyrus SASL支持内存破坏漏洞
BUGTRAQ ID: 47778 CVE ID: CVE-2011-1720 Postfix是Unix类操作系统中所使用的邮件传输代理。 Postfix SMTP Server在实现上存在Cyrus SASL支持内存破坏漏洞，在启用了Cyrus SASL支持时可影响SMTP服务器，远程攻击者可利用此漏洞执行任意代码或造成拒绝服务。 启用了SASL验证时，Postfix SMTP Server为每个SMTP会话创建了一个SASL句柄，在关闭SMTP连接前会一直使用此句柄。根据Cyrus SASL include源文件的注释，服务器在客户端验证失败后不应重新使用Cyrus...
USN-1131-1: Postfix vulnerability
Thomas Jarosch discovered that Postfix incorrectly handled authentication mechanisms other than PLAIN and LOGIN when the Cyrus SASL library is used. A remote attacker could use this to cause Postfix to crash, leading to a denial of service, or possibly execute arbitrary code as the postfix user...
Postfix SMTP server Cyrus SASL support contains a memory corruption vulnerability
Overview The Postfix SMTP server has a memory corruption error when the Cyrus SASL library is used with authentication mechanisms other than PLAIN and LOGIN. Description The Postfix Advisory for CVE-2011-1720 states:"The Postfix SMTP server fails to create a new Cyrus SASL server handle after...
Debian DSA-2233-1 : postfix - several vulnerabilities
Several vulnerabilities were discovered in Postfix, a mail transfer agent. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-2939 The postinst script grants the postfix user write access to /var/spool/postfix/pid, which might allow local users to...
CVE-2011-1720
The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails, which allows remote attackers to cause a denial of service...
SuSE9 Security Update : Postfix (YOU Patch Number 12707)
The following bugs have been fixed : - Remote attackers could potentially exploit a memory corruption issue in postfix' SASL implementation to execute arbitrary code. CVE-2011-1720 - Also Postfix did not clear the receive buffer after the STARTTLS command. A man-in-the middle could therefore inje...
Memory corruption in Postfix SMTP server Cyrus SASL support (CVE-2011-1720)
On-line version will be at http://www.postfix.org/CVE-2011-1720.html Summary ======= The Postfix SMTP server has a memory corruption error when the Cyrus SASL library is used with authentication mechanisms other than PLAIN and LOGIN the ANONYMOUS mechanism is unaffected but should not be enabled...