CVE-2008-3889
Summary
| CVE | CVE-2008-3889 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2008-09-12 16:56:00 UTC |
|---|
| Updated | 2018-10-11 20:50:00 UTC |
|---|
| Description | Postfix 2.4 before 2.4.9, 2.5 before 2.5.5, and 2.6 before 2.6-20080902, when used with the Linux 2.6 kernel, leaks epoll file descriptors during execution of "non-Postfix" commands, which allows local users to cause a denial of service (application slowdown or exit) via a crafted command, as demonstrated by a command in a .forward file. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Postfix Linux epoll File Descriptor Leak Lets Local Users Deny Service - SecurityTracker |
SECTRACK |
securitytracker.com |
|
| [SECURITY] Fedora 9 Update: postfix-2.5.5-1.fc9 |
FEDORA |
www.redhat.com |
|
| Support / Security / Advisories / / MDVSA-2008:190 | Mandriva |
MANDRIVA |
www.mandriva.com |
|
| [security-announce] SUSE Security Summary Report: SUSE-SR:2008:018 |
SUSE |
lists.opensuse.org |
|
| Gentoo update for postfix - Secunia Advisories - Vulnerability Intelligence - Secunia.com |
SECUNIA |
secunia.com |
|
| Postfix epoll File Descriptor Leak Security Issue - Secunia Advisories - Vulnerability Intelligence - Secunia.com |
SECUNIA |
secunia.com |
Vendor Advisory |
| No se encontró la página | Kaizen lifestyle - Albert Sellarès Blog |
MISC |
www.wekk.net |
|
| Postfix: Denial of Service — Gentoo Linux Documentation |
GENTOO |
security.gentoo.org |
|
| Fedora update for postfix - Secunia.com |
SECUNIA |
secunia.com |
|
| Postfix < 2.4.9, 2.5.5, 2.6-20080902 (.forward) Local DoS Exploit |
EXPLOIT-DB |
www.exploit-db.com |
|
| SUSE Update for Multiple Packages - Secunia Advisories - Vulnerability Intelligence - Secunia.com |
SECUNIA |
secunia.com |
|
| USN-642-1: Postfix vulnerability | Ubuntu |
UBUNTU |
www.ubuntu.com |
|
| Postfix Linux-only local denial of service |
CONFIRM |
www.postfix.org |
Patch |
| Ubuntu update for postfix - Secunia Advisories - Vulnerability Intelligence - Secunia.com |
SECUNIA |
secunia.com |
|
| IBM X-Force Exchange |
XF |
exchange.xforce.ibmcloud.com |
|
| [SECURITY] Fedora 8 Update: postfix-2.5.5-1.fc8 |
FEDORA |
www.redhat.com |
|
| SecurityFocus |
BUGTRAQ |
www.securityfocus.com |
|
| Postfix 'epoll' Linux Event Handler Local Denial of Service Vulnerability |
BID |
www.securityfocus.com |
|
| SecurityFocus |
BUGTRAQ |
www.securityfocus.com |
|
| SecurityReason - Postfix Linux-only local denial of service |
SREASON |
securityreason.com |
|
| SecurityFocus |
BUGTRAQ |
www.securityfocus.com |
|
| wiki.rpath.com/wiki/Advisories:rPSA-2008-0311 |
CONFIRM |
wiki.rpath.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
Vendor Comments And Credit
| Organization | Published | Contributor | Statement |
|---|
| Red Hat | 2017-09-28 | Joshua Bressers | Not vulnerable. This issue did not affect the versions Postfix as shipped with Red Hat Enterprise Linux 3, 4, or 5. |
There are currently no legacy QID mappings associated with this CVE.
