Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS)

USN-642-1: Postfix vulnerabilities

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) USN-642-1: Postfix vulnerabilities
# 1  
Old 09-10-2008
USN-642-1: Postfix vulnerabilities
Referenced CVEs:
CVE-2008-3889


Description:
=========================================================== Ubuntu Security Notice USN-642-1 September 10, 2008 postfix vulnerabilities CVE-2008-3889 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 7.10 Ubuntu 8.04 LTS This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 7.10: postfix 2.4.5-3ubuntu1.3 Ubuntu 8.04 LTS: postfix 2.5.1-2ubuntu1.2 In general, a standard system upgrade is sufficient to effect the necessary changes. Details follow: Wietse Venema discovered that Postfix leaked internal file descriptors when executing non-Postfix commands. A local attacker could exploit this to cause Postfix to run out of descriptors, leading to a denial of service.





More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT LINUX

postfix-add-filter

POSTFIX-ADD-FILTER(8)					      System Manager's Manual					     POSTFIX-ADD-FILTER(8)

NAME

       postfix-add-filter - add filter service to Postfix master.cf

SYNOPSIS

       postfix-add-filter [smtp service name...] [smtpd port...]

DESCRIPTION

       The  postfix-add-filter(8)  command  adds an smtp service named smtp service name and and smtpd server listening on smtpd port to etc/post-
       fix/master.cf to facilitate integration of SMTP filters such as amavisd-new or clamsmtp.  The configuration is based on the upstream recom-
       mendations for amavisd-new 2.6.0.  Adminstrators should verify it is appropriate for their requirements.

       The original file is copied prior to modification and left in /etc/postfix to make it possible to revert changes easily.

       Available in the Debian package for Postfix version 2.5.3 and later.

DIAGNOSTICS

       If  the given smtp service name or smtpd port already appear in the master.cf, a message will be printed to standard out and master.cf will
       not be modified.

ENVIRONMENT

       MAIL_CONFIG
	      Directory with Postfix configuration files.

	      The postfix-add-filter(8) command should use this, but it currently doesn't.  It is hard coded  to  /etc/postfix.   This	should	be
	      changed.

CONFIGURATION PARAMETERS

       None

FILES

       /etc/postfix/master.cf

SEE ALSO

       postconf(5), Postfix configuration

LICENSE

       This software is licensed under the MIT open source license.

AUTHOR(S)
       Scott Kitterman
       <scott@kitterman.com>

															     POSTFIX-ADD-FILTER(8)