Test Kennung:	1.3.6.1.4.1.25623.1.0.831400
Kategorie:	Mandrake Local Security Checks
Titel:	Mandriva Update for postfix MDVSA-2011:090 (postfix)
Zusammenfassung:	The remote host is missing an update for the 'postfix'; package(s) announced via the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'postfix' package(s) announced via the referenced advisory. Vulnerability Insight: A vulnerability has been found and corrected in postfix: The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails, which allows remote attackers to cause a denial of service (heap memory corruption and daemon crash) or possibly execute arbitrary code via an invalid AUTH command with one method followed by an AUTH command with a different method (CVE-2011-1720). Packages for 2009.0 are provided as of the Extended Maintenance Program. The updated packages have been patched to correct this issue. Affected Software/OS: postfix on Mandriva Linux 2009.0, Mandriva Linux 2009.0/X86_64, Mandriva Linux 2010.1, Mandriva Linux 2010.1/X86_64, Mandriva Enterprise Server 5, Mandriva Enterprise Server 5/X86_64 Solution: Please Install the Updated Packages. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1720 BugTraq ID: 47778 http://www.securityfocus.com/bid/47778 Bugtraq: 20110509 Memory corruption in Postfix SMTP server Cyrus SASL support (CVE-2011-1720) (Google Search) http://www.securityfocus.com/archive/1/517917/100/0/threaded CERT/CC vulnerability note: VU#727230 http://www.kb.cert.org/vuls/id/727230 Debian Security Information: DSA-2233 (Google Search) http://www.debian.org/security/2011/dsa-2233 http://security.gentoo.org/glsa/glsa-201206-33.xml http://www.mandriva.com/security/advisories?name=MDVSA-2011:090 http://www.mail-archive.com/postfix-announce@postfix.org/msg00007.html http://www.osvdb.org/72259 http://www.securitytracker.com/id?1025521 http://secunia.com/advisories/44500 http://securityreason.com/securityalert/8247 SuSE Security Announcement: SUSE-SA:2011:023 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00002.html http://www.ubuntu.com/usn/usn-1131-1 XForce ISS Database: postfix-cyrus-sasl-code-exec(67359) https://exchange.xforce.ibmcloud.com/vulnerabilities/67359
Copyright	Copyright (c) 2011 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.