PT-2011-2331 · Postfix+1 · Postfix+1

Wietse Venema · Published 2011-03-16 · Updated 2024-06-15 · CVE-2011-0411

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Postfix versions 2.4.x through 2.4.15 Postfix versions 2.5.x through 2.5.11 Postfix versions 2.6.x through 2.6.8 Postfix versions 2.7.x through 2.7.2

Description The issue allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack. This occurs due to improper restriction of I/O buffering in the STARTTLS implementation.

Recommendations For Postfix versions 2.4.x through 2.4.15, update to version 2.4.16 or later. For Postfix versions 2.5.x through 2.5.11, update to version 2.5.12 or later. For Postfix versions 2.6.x through 2.6.8, update to version 2.6.9 or later. For Postfix versions 2.7.x through 2.7.2, update to version 2.7.3 or later.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2011-0411

DSA-2233-1

ELSA-2011-0423

IMAPSTARTTLSPLAINTEXTINJECTIONS

OPENSUSE-SU-2024:10318-1

POP3STARTTLSPLAINTEXTINJECTIONS

RHSA-2011:0422

RHSA-2011:0423

RHSA-2011_0422

RHSA-2011_0423

SMTPSTARTTLSPLAINTEXTINJECTIONS

Affected Products

Postfix

Red Hat

References · 45

• 🔥 http://postfix.org/CVE-2011-0411.html · Exploit
• http://security.gentoo.org/glsa/glsa-201206-33.xml · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056559.html · Vendor Advisory
• http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-0411 · Vendor Advisory
• http://debian.org/security/2011/dsa-2233 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056560.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0411 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-0411 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-0411 · Vendor Advisory
• http://vupen.com/english/advisories/2011/0611 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2011-0422.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10318-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2011-0423.html · Vendor Advisory