Re: [USN-74-1] Postfix vulnerability

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: [USN-74-1] Postfix vulnerability
From: wietse@xxxxxxxxxxxxx (Wietse Venema)
Date: Sat, 5 Feb 2005 17:09:57 -0500 (EST)
Cc: ubuntu-security-announce@xxxxxxxxxxxxxxxx, full-disclosure@xxxxxxxxxxxxxxxx
In-reply-to: <20050204091325.GB551@xxxxxxxxxxxxxxxxxxxx> "from Martin Pitt at Feb 4, 2005 10:13:25 am"
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

FYI,

This is a bug in a third-party IPv6 patch that is not part of Postfix.

Neither the official Postfix release, nor the work-in-progress
version are not affected by this.

        Wietse

Martin Pitt:
> Jean-Samuel Reynaud noticed a programming error in the IPv6 handling
> code of Postfix when /proc/net/if_inet6 is not available (which is the
> case in Ubuntu since Postfix runs in a chroot). If "permit_mx_backup"
> was enabled in the "smtpd_recipient_restrictions", Postfix turned into
> an open relay, i. e. erroneously permitted the delivery of arbitrary
> mail to any MX host which has an IPv6 address.

References:
- [USN-74-1] Postfix vulnerability
  - From: Martin Pitt

Prev by Date: [USN-74-2] Fixed Postfix packages for USN-74-1
Next by Date: [SECURITY] [DSA 669-1] New php3 packages fix several vulnerabilities
Previous by thread: [USN-74-1] Postfix vulnerability
Next by thread: [USN-75-1] cpio vulnerability
Index(es):
- Date
- Thread