PT-2005-1415 · Postfix+1 · Postfix+1

Jean-Samuel Reynaud · Publicado 2005-02-10 · Atualizado 2017-10-11 · CVE-2005-0337

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Postfix version 2.1.3

Description The issue allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname, when /proc/net/if inet6 is not available and permit mx backup is enabled in smtpd recipient restrictions.

Recommendations For Postfix version 2.1.3, consider disabling the permit mx backup option in smtpd recipient restrictions as a temporary workaround to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-0337

RHSA-2005:152

RHSA-2005_152

Produtos afetados

Postfix

Red Hat

Referências · 13

• https://nvd.nist.gov/vuln/detail/CVE-2005-0337 · Nota de Segurança
• https://rhn.redhat.com/errata/RHSA-2005-152.html · Nota
• http://secunia.com/advisories/14137 · Correção
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0337 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11339 · Nota
• http://redhat.com/support/errata/RHSA-2005-152.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19218 · Nota
• http://securityfocus.com/bid/12445 · Correção
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=267837 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2005-0337 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=110763358832637&w=2 · Nota
• https://redhat.com/security/data/cve/CVE-2005-0337.html · Nota
• https://osv.dev/vulnerability/CVE-2005-0337 · Aviso do Fabricante