PT-2008-5224 · Linux+1 · Linux+1

Marc Morata Fitã© · Publicado 2008-09-12 · Atualizado 2018-10-11 · CVE-2008-3889

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Postfix versions 2.4 through 2.4.8 Postfix versions 2.5 through 2.5.4 Postfix versions 2.6 through 2.6-20080901

Description The issue allows local users to cause a denial of service, resulting in application slowdown or exit, by executing a crafted command. This can be demonstrated by a command in a .forward file, which exploits the leak of epoll file descriptors during the execution of non-Postfix commands when used with the Linux 2.6 kernel.

Recommendations For Postfix versions 2.4 through 2.4.8, update to version 2.4.9 or later. For Postfix versions 2.5 through 2.5.4, update to version 2.5.5 or later. For Postfix versions 2.6 through 2.6-20080901, update to version 2.6-20080902 or later.

Exploit

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-3889

Produtos afetados

Linux

Postfix

Referências · 26

• 🔥 https://exploit-db.com/exploits/6472 · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-3889 · Aviso do Fabricante
• http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0311 · Nota
• http://secunia.com/advisories/31716 · Aviso do Fabricante
• https://redhat.com/archives/fedora-package-announce/2008-October/msg00271.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44865 · Nota
• http://securityfocus.com/bid/30977 · Nota
• http://securityfocus.com/archive/1/495894/100/0/threaded · Nota
• http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-3889 · Nota de Segurança
• http://secunia.com/advisories/32231 · Nota
• https://redhat.com/archives/fedora-package-announce/2008-October/msg00287.html · Aviso do Fabricante
• http://securityfocus.com/archive/1/498037/100/0/threaded · Nota
• http://wekk.net/research/CVE-2008-3889 · Nota
• http://secunia.com/advisories/31982 · Nota