ID de Prueba:	1.3.6.1.4.1.25623.1.0.840658
Categoría:	Ubuntu Local Security Checks
Título:	Ubuntu Update for postfix USN-1131-1
Resumen:	Ubuntu Update for Linux kernel vulnerabilities USN-1131-1
Descripción:	Summary: Ubuntu Update for Linux kernel vulnerabilities USN-1131-1 Vulnerability Insight: Thomas Jarosch discovered that Postfix incorrectly handled authentication mechanisms other than PLAIN and LOGIN when the Cyrus SASL library is used. A remote attacker could use this to cause Postfix to crash, leading to a denial of service, or possibly execute arbitrary code as the postfix user. Affected Software/OS: postfix on Ubuntu 11.04, Ubuntu 10.10, Ubuntu 10.04 LTS, Ubuntu 8.04 LTS, Ubuntu 6.06 LTS Solution: Please Install the Updated Packages. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1720 BugTraq ID: 47778 http://www.securityfocus.com/bid/47778 Bugtraq: 20110509 Memory corruption in Postfix SMTP server Cyrus SASL support (CVE-2011-1720) (Google Search) http://www.securityfocus.com/archive/1/517917/100/0/threaded CERT/CC vulnerability note: VU#727230 http://www.kb.cert.org/vuls/id/727230 Debian Security Information: DSA-2233 (Google Search) http://www.debian.org/security/2011/dsa-2233 http://security.gentoo.org/glsa/glsa-201206-33.xml http://www.mandriva.com/security/advisories?name=MDVSA-2011:090 http://www.mail-archive.com/postfix-announce@postfix.org/msg00007.html http://www.osvdb.org/72259 http://www.securitytracker.com/id?1025521 http://secunia.com/advisories/44500 http://securityreason.com/securityalert/8247 SuSE Security Announcement: SUSE-SA:2011:023 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00002.html http://www.ubuntu.com/usn/usn-1131-1 XForce ISS Database: postfix-cyrus-sasl-code-exec(67359) https://exchange.xforce.ibmcloud.com/vulnerabilities/67359
Copyright	Copyright (c) 2011 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.