975 matches found
PT-2008-6149 · Postfix · Postfix
Name of the Vulnerable Software and Affected Versions: Postfix version 2.5.2 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/postfix groups.stdout, /tmp/postfix groups.stderr, and /tmp/postfix groups.message temporary files. The vendor...
CVE-2008-4977: Improper Link Resolution Before File Access
postfixgroups.pl in Postfix 2.5.2 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/postfixgroups.stdout, 2 /tmp/postfixgroups.stderr, and 3 /tmp/postfixgroups.message temporary files. NOTE: the vendor disputes this vulnerability, stating "This is not a real issue...
CVE-2008-3646
The Postfix configuration file in Mac OS X 10.5.5 causes Postfix to be network-accessible when mail is sent from a local command-line tool, which allows remote attackers to send mail to local Mac OS X users...
Default configuration
The Postfix configuration file in Mac OS X 10.5.5 causes Postfix to be network-accessible when mail is sent from a local command-line tool, which allows remote attackers to send mail to local Mac OS X users...
CVE-2008-3646
The Postfix configuration file in Mac OS X 10.5.5 causes Postfix to be network-accessible when mail is sent from a local command-line tool, which allows remote attackers to send mail to local Mac OS X users...
CVE-2008-3646
CVE-2008-3646 affects Postfix on Mac OS X 10.5.5, where a configuration issue makes Postfix network-accessible when mail is sent from a local command-line tool, enabling remote sending of mail to local Mac OS X users. The connected sources confirm the affected product/version and the general impa...
Mac OS X Multiple Vulnerabilities (Security Update 2008-007)
The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have the security update 2008-007 applied. This security update contains fixes for the following products : - Apache - Certificates - ClamAV - ColorSync - CUPS - Finder - launchd - libxslt - MySQL Server - Networking - PH...
Fedora 8 : postfix-2.5.5-1.fc8 (2008-8595)
New upstream patch level version 2.5.5, including multiple security fixes detailed in upstream announcements: http://www.postfix.org/announcements/20080814.html http://www.postfix.org/announcements/20080902.html Note that Tenable Network Security has extracted the preceding description block...
CVE-2008-3646: Concurrent Execution using Shared Resource with Improper Synchronization
The Postfix configuration file in Mac OS X 10.5.5 causes Postfix to be network-accessible when mail is sent from a local command-line tool, which allows remote attackers to send mail to local Mac OS X users...
Fedora 9 : postfix-2.5.5-1.fc9 (2008-8593)
New upstream patch level version 2.5.5, including multiple security fixes detailed in upstream announcements: http://www.postfix.org/announcements/20080814.html http://www.postfix.org/announcements/20080902.html Note that Tenable Network Security has extracted the preceding description block...
[SECURITY] Fedora 8 Update: postfix-2.5.5-1.fc8
Postfix is a Mail Transport Agent MTA, supporting LDAP, SMTP AUTH SASL, TLS...
Postfix epoll File Descriptor Leak Local DoS
According to its banner, the version of Postfix running on the remote host leaks 'epoll' file descriptors when it executes non-Postfix commands from, say, a user's .forward file. A local attacker can access the leaked epoll descriptor to launch a denial of service attack against Postfix. Note tha...
Postfix Detection
Binary data 4695.prm...
Gentoo Security Advisory GLSA 200808-12 (postfix)
The remote host is missing updates announced in advisory GLSA 200808-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200803-30 (ssl-cert.eclass)
The remote host is missing updates announced in advisory GLSA 200803-30. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200808-12 (postfix)
The remote host is missing updates announced in advisory GLSA 200808-12. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200809-09 (postfix)
The remote host is missing updates announced in advisory GLSA 200809-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200809-09 (postfix)
The remote host is missing updates announced in advisory GLSA 200809-09. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200803-30 (ssl-cert.eclass)
The remote host is missing updates announced in advisory GLSA 200803-30. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GLSA-200809-09 : Postfix: Denial of Service
The remote host is affected by the vulnerability described in GLSA-200809-09 Postfix: Denial of Service It has been discovered than Postfix leaks an epoll file descriptor when executing external commands, e.g. user-controlled $HOME/.forward or $HOME/.procmailrc files. NOTE: This vulnerability onl...