Fedora 15 : postfix-2.8.3-1.fc15 (2011-6784)

This is an update that fixes memory corruption in Postfix SMTP server Cyrus SASL support CVE-2011-1720. For original upstream announcement see: http://archives.neohapsis.com/archives/postfix/2011-05/0208.html Note that Tenable Network Security has extracted the preceding description block directl...

SMTP Service Cleartext Login Permitted

The remote host is running an SMTP server that advertises that it allows cleartext logins over unencrypted connections. An attacker may be able to uncover user names and passwords by sniffing traffic to the server if a less secure authentication mechanism i.e. LOGIN or PLAIN is used. C Tenable...

Anonymous SMTP Authentication Enabled

This SMTP service allows anonymous authentication. Any remote user may connect and authenticate without providing a password or unique credentials. This may effectively turn the remote server into an open mail relay. C Tenable Network Security, Inc. include"compat.inc"; if description...

Mandriva Linux Security Advisory : postfix (MDVSA-2011:090)

A vulnerability has been found and corrected in postfix : The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails,...

Fedora 13 : postfix-2.7.4-1.fc13 (2011-6777)

This is an update that fixes memory corruption in Postfix SMTP server Cyrus SASL support CVE-2011-1720. For original upstream announcement see: http://archives.neohapsis.com/archives/postfix/2011-05/0208.html Note that Tenable Network Security has extracted the preceding description block directl...

[SECURITY] Fedora 14 Update: postfix-2.7.4-1.fc14

Postfix is a Mail Transport Agent MTA, supporting LDAP, SMTP AUTH SASL, TLS...

[SECURITY] Fedora 13 Update: postfix-2.7.4-1.fc13

Postfix is a Mail Transport Agent MTA, supporting LDAP, SMTP AUTH SASL, TLS...

CVE-2011-1720

The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails, which allows remote attackers to cause a denial of service...

DEBIAN-CVE-2011-1720

The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails, which allows remote attackers to cause a denial of service...

Memory corruption

The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails, which allows remote attackers to cause a denial of service...

CVE-2011-1720

The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails, which allows remote attackers to cause a denial of service...

CVE-2011-1720

Summary: CVE-2011-1720 affects the Postfix SMTP server when Cyrus SASL authentication methods other than PLAIN/LOGIN are used. A memory corruption could occur after a client authentication failure, potentially leading to a heap corruption, daemon crash, or arbitrary code execution. What is affect...

CVE-2011-1720

The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails, which allows remote attackers to cause a denial of service...

CVE-2011-1720

The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails, which allows remote attackers to cause a denial of service...

CVE-2011-1720

The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails, which allows remote attackers to cause a denial of service...

CVE-2011-1720: Improper Restriction of Operations within the Bounds of a Memory Buffer

The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails, which allows remote attackers to cause a denial of service...

Postfix SMTP Server Cyrus SASL支持内存破坏漏洞

BUGTRAQ ID: 47778 CVE ID: CVE-2011-1720 Postfix是Unix类操作系统中所使用的邮件传输代理。 Postfix SMTP Server在实现上存在Cyrus SASL支持内存破坏漏洞，在启用了Cyrus SASL支持时可影响SMTP服务器，远程攻击者可利用此漏洞执行任意代码或造成拒绝服务。 启用了SASL验证时，Postfix SMTP Server为每个SMTP会话创建了一个SASL句柄，在关闭SMTP连接前会一直使用此句柄。根据Cyrus SASL include源文件的注释，服务器在客户端验证失败后不应重新使用Cyrus...

PT-2011-3320

Name of the Vulnerable Software and Affected Versions Postfix versions prior to 2.5.13 Postfix versions 2.6.x prior to 2.6.10 Postfix versions 2.7.x prior to 2.7.4 Postfix versions 2.8.x prior to 2.8.3 Description The issue is related to the SMTP server in Postfix when certain Cyrus SASL...

FreeBSD Ports: postfix, postfix-base

The remote host is missing an update to the system as announced in the referenced advisory. VID 14a6f516-502f-11e0-b448-bbfa2731f9c7 OpenVAS Vulnerability Test $ Description: Auto generated from VID 14a6f516-502f-11e0-b448-bbfa2731f9c7 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

CVE-2011-1720

The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails, which allows remote attackers to cause a denial of service...