PT-2010-2031 · Suse+1 · Suse Linux Enterprise+2

Published 2010-01-22 · Updated 2011-04-28 · CVE-2010-0230

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise version 10 SP3 openSUSE version 11.2

Description The issue allows remote attackers to bypass intended access restrictions because postfix is configured to listen on all network interfaces.

Recommendations For SUSE Linux Enterprise version 10 SP3, consider reconfiguring postfix to only listen on specific network interfaces to minimize the risk of exploitation. For openSUSE version 11.2, restrict postfix to only listen on intended network interfaces as a mitigation measure.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-0230

Affected Products

Suse Linux Enterprise

Opensuse

Postfix

References · 3

• http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00004.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0230 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html · Vendor Advisory