14 matches found
EUVD-1999-0460
Malware in sbrugna...
CVE-1999-0461
Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address...
CentOS Update for postfix CESA-2011:0422 centos5 x86_64
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Postfix SMTP Server Cyrus SASL支持内存破坏漏洞
BUGTRAQ ID: 47778 CVE ID: CVE-2011-1720 Postfix是Unix类操作系统中所使用的邮件传输代理。 Postfix SMTP Server在实现上存在Cyrus SASL支持内存破坏漏洞，在启用了Cyrus SASL支持时可影响SMTP服务器，远程攻击者可利用此漏洞执行任意代码或造成拒绝服务。 启用了SASL验证时，Postfix SMTP Server为每个SMTP会话创建了一个SASL句柄，在关闭SMTP连接前会一直使用此句柄。根据Cyrus SASL include源文件的注释，服务器在客户端验证失败后不应重新使用Cyrus...
USN-1113-1: Postfix vulnerabilities
It was discovered that the Postfix package incorrectly granted write access on the PID directory to the postfix user. A local attacker could use this flaw to possibly conduct a symlink attack and overwrite arbitrary files. This issue only affected Ubuntu 6.06 LTS and 8.04 LTS. CVE-2009-2939 Wiets...
RedHat Update for postfix RHSA-2011:0422-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Moderate: Red Hat Security Advisory: postfix security update
Updated postfix packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
FreeBSD : postfix -- plaintext command injection with SMTP over TLS (14a6f516-502f-11e0-b448-bbfa2731f9c7)
Wietse Venema has discovered a software flaw that allows an attacker to inject client commands into an SMTP session during the unprotected plaintext SMTP protocol phase, such that the server will execute those commands during the SMTP- over-TLS protocol phase when all communication is supposed to...
postfix -- plaintext command injection with SMTP over TLS
Wietse Venema has discovered a software flaw that allows an attacker to inject client commands into an SMTP session during the unprotected plaintext SMTP protocol phase, such that the server will execute those commands during the SMTP- over-TLS protocol phase when all communication is supposed to...
Debian和Ubuntu Postfix不安全临时文件建立漏洞
Bugraq ID: 36469 CVE ID：CVE-2009-2939 Postfix是一款开放源代码的邮件传输代理，运行在不同类型的UNIX系统上。 Debian和Ubuntu包含的Postfix不安全建立临时文件，本地攻击者可以利用漏洞以应用程序权限覆盖任意文件。 Wietse Venema发现Debian和Ubuntu把/var/spool/postfix/pid的权限设置为postfix:root 0755，这允许postfix用户操作pid文件并通过符号链接攻击覆盖任意文件。 Wietse Venema Postfix 2.5.5 Ubuntu Ubuntu Linux...
Ubuntu Update for postfix vulnerabilities USN-642-1
Ubuntu Update for Linux kernel vulnerabilities USN-642-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6421.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for postfix vulnerabilities USN-642-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Postfix 'epoll' Linux事件处理器本地拒绝服务漏洞
BUGTRAQ ID: 30977 CNCAN ID：CNCAN-2008090307 Postfix是一款开放源代码的邮件传输代理，运行在不同类型的UNIX系统上。 Linux下的Postfix处理非Postfix命令存在问题，本地攻击者可以利用漏洞对服务程序进行拒绝服务攻击。 Linux2.6内核下的Postfix 2.4在执行非postfix命令时存在epoll文件描述符泄漏，如一个用户的$HOME/.forward文件，本地用户访问泄漏的epoll文件描述符可对Postfix实现拒绝服务攻击。攻击可导致降低Postfix性能或使Postfix由于触发内部安全机制而自动关闭。...
CVE-1999-0461
CVE-1999-0461 affects rpcbind implementations (Linux, IRIX and Wietse Venema’s rpcbind). The issue allows a remote attacker to insert and delete entries by spoofing the source address. Exploitation status is mentioned in multiple sources, but no specific patch/versions with a fix are provided in ...
