PT-2010-2031 · Suse+1 · Suse Linux Enterprise+2

Publicado 2010-01-22 · Atualizado 2011-04-28 · CVE-2010-0230

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise version 10 SP3 openSUSE version 11.2

Description The issue allows remote attackers to bypass intended access restrictions because postfix is configured to listen on all network interfaces.

Recommendations For SUSE Linux Enterprise version 10 SP3, consider reconfiguring postfix to only listen on specific network interfaces to minimize the risk of exploitation. For openSUSE version 11.2, restrict postfix to only listen on intended network interfaces as a mitigation measure.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2010-0230

Produtos afetados

Suse Linux Enterprise

Opensuse

Postfix

Referências · 3

• http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00004.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-0230 · Nota de Segurança
• http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html · Aviso do Fabricante