lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Sat, 5 Feb 2005 17:09:57 -0500 (EST) From: wietse@...cupine.org (Wietse Venema) To: bugtraq@...urityfocus.com Cc: ubuntu-security-announce@...ts.ubuntu.com, full-disclosure@...ts.netsys.com Subject: Re: [USN-74-1] Postfix vulnerability FYI, This is a bug in a third-party IPv6 patch that is not part of Postfix. Neither the official Postfix release, nor the work-in-progress version are not affected by this. Wietse Martin Pitt: > Jean-Samuel Reynaud noticed a programming error in the IPv6 handling > code of Postfix when /proc/net/if_inet6 is not available (which is the > case in Ubuntu since Postfix runs in a chroot). If "permit_mx_backup" > was enabled in the "smtpd_recipient_restrictions", Postfix turned into > an open relay, i. e. erroneously permitted the delivery of arbitrary > mail to any MX host which has an IPv6 address. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Powered by blists - more mailing lists