PT-2011-3126 · Qmail · Netqmail

Wietse Venema · Published 2011-03-16 · Updated 2017-08-17 · CVE-2011-1431

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions netqmail versions 1.06

Description The issue is related to the STARTTLS implementation in qmail-smtpd, which does not properly restrict I/O buffering. This allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place. The attack is referred to as a "plaintext command injection" attack.

Recommendations For netqmail version 1.06, consider disabling the STARTTLS implementation until a patch is available to properly restrict I/O buffering and prevent plaintext command injection attacks. Restrict access to the SMTP service to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2011-1431

Affected Products

Netqmail

References · 10

• 🔥 http://securityfocus.com/archive/1/516901 · Exploit
• 🔥 http://postfix.org/CVE-2011-0411.html · Exploit
• http://inoa.net/qmail-tls/vu555316.patch · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2011-1431 · Security Note
• http://vupen.com/english/advisories/2011/0612 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65932 · Note
• http://kb.cert.org/vuls/id/555316 · Note
• http://securityfocus.com/bid/46767 · Note
• http://kb.cert.org/vuls/id/MAPG-8D9M5Q · Note
• http://securityreason.com/securityalert/8144 · Note