ID de Prueba:	1.3.6.1.4.1.25623.1.0.50739
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDKSA-2003:081 (postfix)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to postfix announced via advisory MDKSA-2003:081. Two vulnerabilities were discovered in the postfix MTA by Michal Zalewski. Versions prior to 1.1.12 would allow an attacker to bounce- scan private networks or use the daemon as a DDoS (Distributed Denial of Service) tool by forcing the daemon to connect to an arbitrary service at an arbitrary IP address and receiving either a bounce message or by timing. As well, versions prior to 1.1.12 have a bug where a malformed envelope address can cause the queue manager to lock up until an entry is removed from the queue and also lock up the SMTP listener leading to a DoS. Postfix version 1.1.13 corrects these issues. The provided packages have been patched to fix the vulnerabilities. Affected versions: 8.2, 9.0, Corporate Server 2.1, Multi Network Firewall 8.2 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDKSA-2003:081 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0468 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0540 Risk factor : Medium CVSS Score: 5.0
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2003-0468 BugTraq ID: 8333 http://www.securityfocus.com/bid/8333 Bugtraq: 20030804 Postfix 1.1.12 remote DoS / Postfix 1.1.11 bounce scanning (Google Search) http://marc.info/?l=bugtraq&m=106001525130257&w=2 Conectiva Linux advisory: CLA-2003:717 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000717 Debian Security Information: DSA-363 (Google Search) http://www.debian.org/security/2003/dsa-363 http://www.mandriva.com/security/advisories?name=MDKSA-2003:081 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A522 http://www.redhat.com/support/errata/RHSA-2003-251.html http://secunia.com/advisories/9433 SuSE Security Announcement: SuSE-SA:2003:033 (Google Search) http://www.novell.com/linux/security/advisories/2003_033_postfix.html Common Vulnerability Exposure (CVE) ID: CVE-2003-0540 CERT/CC vulnerability note: VU#895508 http://www.kb.cert.org/vuls/id/895508 En Garde Linux Advisory: ESA-20030804-019 http://www.linuxsecurity.com/advisories/engarde_advisory-3517.html http://lists.grok.org.uk/pipermail/full-disclosure/2003-August/007693.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A544 http://marc.info/?l=bugtraq&m=106029188614704&w=2
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.