Postfix SMTP Server Cyrus SASL Support Memory Corruption Vulnerability
BID:47778
Info
Postfix SMTP Server Cyrus SASL Support Memory Corruption Vulnerability
| Bugtraq ID: | 47778 |
| Class: | Design Error |
| CVE: |
CVE-2011-1720 |
| Remote: | Yes |
| Local: | No |
| Published: | May 09 2011 12:00AM |
| Updated: | Mar 19 2015 08:22AM |
| Credit: | Wietse Venema |
| Vulnerable: |
Wietse Venema Postfix 2.7.3 Wietse Venema Postfix 2.6.9 Wietse Venema Postfix 2.5.12 Wietse Venema Postfix 2.5.5 Wietse Venema Postfix 2.5.4 Wietse Venema Postfix 2.8 Wietse Venema Postfix 2.6-20080902 Wietse Venema Postfix 2.6 Wietse Venema Postfix 2.5.4 Patchlevel 4 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 LTS Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 SuSE SUSE Linux Enterprise Teradata 10 SP3 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 11 SP1 SuSE SUSE Linux Enterprise Server 10 SP4 SuSE SUSE Linux Enterprise Server 10 SP3 SuSE SUSE Linux Enterprise SDK 11 SP1 SuSE SUSE Linux Enterprise Desktop 11 SP1 SuSE SUSE Linux Enterprise Desktop 10 SP4 SuSE SUSE Linux Enterprise 11 SP1 SuSE SUSE Linux Enterprise 10 SP4 SuSE SUSE Linux Enterprise 10 SP3 SuSE SUSE Linux Enterprise 10 SP2 SuSE openSUSE 11.4 SuSE openSUSE 11.3 S.u.S.E. openSUSE 11.2 S.u.S.E. Open-Enterprise-Server 0 S.u.S.E. Novell Linux POS 9 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux ES 4 RedHat Enterprise Linux Desktop version 4 Red Hat Fedora 15 Red Hat Fedora 14 Red Hat Fedora 13 Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 Red Hat Enterprise Linux Desktop 5 client Red Hat Enterprise Linux AS 4 Red Hat Enterprise Linux 5 Server Pardus Linux 2009 0 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 Kolab Kolab Groupware Server 2.2.4 Kolab Kolab Groupware Server 2.2.3 Kolab Kolab Groupware Server 2.2.2 Kolab Kolab Groupware Server 2.2 Kolab Kolab Groupware Server 2.1 Kolab Kolab Groupware Server 2.0.4 Kolab Kolab Groupware Server 2.0.3 Kolab Kolab Groupware Server 2.0.2 Kolab Kolab Groupware Server 2.0.1 Kolab Kolab Groupware Server 2.3.1 Kolab Kolab Groupware Server 2.2-rc3 Kolab Kolab Groupware Server 2.2-rc1 Kolab Kolab Groupware Server 2.2 beta3 Kolab Kolab Groupware Server 2.2 beta1 Kolab Kolab Groupware Server 2.2 -rc2 Kolab Kolab Groupware Server 2.1beta2 Kolab Groupware Server 2.1.beta3 Gentoo Linux Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Avaya Aura Communication Manager 6.0.1 Avaya Aura Communication Manager 6.0 |
| Not Vulnerable: |
Wietse Venema Postfix 2.8.3 Wietse Venema Postfix 2.7.4 Wietse Venema Postfix 2.6.10 Wietse Venema Postfix 2.5.13 Kolab Kolab Groupware Server 2.3.2 |
Discussion
Postfix SMTP Server Cyrus SASL Support Memory Corruption Vulnerability
Postfix is prone to a memory-corruption vulnerability that affects the SMTP server when Cyrus SASL support is enabled.
An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
This issue affects the following Postfix version breaches:
2.5.x prior to 2.5.13
2.6.x prior to 2.6.19
2.7.x prior to 2.7.4
2.8.x prior to 2.8.3
Postfix is prone to a memory-corruption vulnerability that affects the SMTP server when Cyrus SASL support is enabled.
An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
This issue affects the following Postfix version breaches:
2.5.x prior to 2.5.13
2.6.x prior to 2.6.19
2.7.x prior to 2.7.4
2.8.x prior to 2.8.3
Exploit / POC
Postfix SMTP Server Cyrus SASL Support Memory Corruption Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Postfix SMTP Server Cyrus SASL Support Memory Corruption Vulnerability
Solution:
Updates are available. Please see the references for more information.
Mandriva Linux Mandrake 2010.1 x86_64
S.u.S.E. openSUSE 11.4
Mandriva Linux Mandrake 2009.0 x86_64
S.u.S.E. openSUSE 11.3
MandrakeSoft Enterprise Server 5 x86_64
MandrakeSoft Enterprise Server 5
Solution:
Updates are available. Please see the references for more information.
Mandriva Linux Mandrake 2010.1 x86_64
-
Mandriva lib64postfix1-2.7.0-4.2mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva postfix-2.7.0-4.2mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva postfix-cdb-2.7.0-4.2mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva postfix-ldap-2.7.0-4.2mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva postfix-mysql-2.7.0-4.2mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva postfix-pcre-2.7.0-4.2mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva postfix-pgsql-2.7.0-4.2mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/download/
S.u.S.E. openSUSE 11.4
-
SuSE postfix-2.7.2-13.16.1.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/postfix-2.7.2-13.16. 1.i586.rpm -
SuSE postfix-2.7.2-13.16.1.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/postfix-2.7.2-13.1 6.1.x86_64.rpm -
SuSE postfix-devel-2.7.2-13.16.1.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/postfix-devel-2.7.2- 13.16.1.i586.rpm -
SuSE postfix-devel-2.7.2-13.16.1.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/postfix-devel-2.7. 2-13.16.1.x86_64.rpm -
SuSE postfix-doc-2.7.2-13.16.1.noarch.rpm
http://download.opensuse.org/update/11.4/rpm/noarch/postfix-doc-2.7.2- 13.16.1.noarch.rpm -
SuSE postfix-mysql-2.7.2-13.16.1.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/postfix-mysql-2.7.2- 13.16.1.i586.rpm -
SuSE postfix-mysql-2.7.2-13.16.1.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/postfix-mysql-2.7. 2-13.16.1.x86_64.rpm -
SuSE postfix-postgresql-2.7.2-13.16.1.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/postfix-postgresql-2 .7.2-13.16.1.i586.rpm -
SuSE postfix-postgresql-2.7.2-13.16.1.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/postfix-postgresql -2.7.2-13.16.1.x86_64.rpm
Mandriva Linux Mandrake 2009.0 x86_64
-
Mandriva lib64postfix1-2.5.5-4.3mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva postfix-2.5.5-4.3mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva postfix-ldap-2.5.5-4.3mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva postfix-mysql-2.5.5-4.3mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva postfix-pcre-2.5.5-4.3mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva postfix-pgsql-2.5.5-4.3mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/
S.u.S.E. openSUSE 11.3
-
SuSE postfix-2.7.1-2.6.1.i586.rpm
http://download.opensuse.org/update/11.3/rpm/i586/postfix-2.7.1-2.6.1. i586.rpm -
SuSE postfix-2.7.1-2.6.1.x86_64.rpm
http://download.opensuse.org/update/11.3/rpm/x86_64/postfix-2.7.1-2.6. 1.x86_64.rpm -
SuSE postfix-devel-2.7.1-2.6.1.i586.rpm
http://download.opensuse.org/update/11.3/rpm/i586/postfix-devel-2.7.1- 2.6.1.i586.rpm -
SuSE postfix-devel-2.7.1-2.6.1.x86_64.rpm
http://download.opensuse.org/update/11.3/rpm/x86_64/postfix-devel-2.7. 1-2.6.1.x86_64.rpm -
SuSE postfix-doc-2.7.1-2.6.1.noarch.rpm
http://download.opensuse.org/update/11.3/rpm/noarch/postfix-doc-2.7.1- 2.6.1.noarch.rpm -
SuSE postfix-mysql-2.7.1-2.6.1.i586.rpm
http://download.opensuse.org/update/11.3/rpm/i586/postfix-mysql-2.7.1- 2.6.1.i586.rpm -
SuSE postfix-mysql-2.7.1-2.6.1.x86_64.rpm
http://download.opensuse.org/update/11.3/rpm/x86_64/postfix-mysql-2.7. 1-2.6.1.x86_64.rpm -
SuSE postfix-postgresql-2.7.1-2.6.1.i586.rpm
http://download.opensuse.org/update/11.3/rpm/i586/postfix-postgresql-2 .7.1-2.6.1.i586.rpm -
SuSE postfix-postgresql-2.7.1-2.6.1.x86_64.rpm
http://download.opensuse.org/update/11.3/rpm/x86_64/postfix-postgresql -2.7.1-2.6.1.x86_64.rpm
MandrakeSoft Enterprise Server 5 x86_64
-
Mandriva lib64postfix1-2.5.5-4.3mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva postfix-2.5.5-4.3mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva postfix-ldap-2.5.5-4.3mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva postfix-mysql-2.5.5-4.3mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva postfix-pcre-2.5.5-4.3mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva postfix-pgsql-2.5.5-4.3mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/download/
MandrakeSoft Enterprise Server 5
-
Mandriva libpostfix1-2.5.5-4.3mdvmes5.2.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva postfix-2.5.5-4.3mdvmes5.2.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva postfix-ldap-2.5.5-4.3mdvmes5.2.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva postfix-mysql-2.5.5-4.3mdvmes5.2.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva postfix-pcre-2.5.5-4.3mdvmes5.2.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva postfix-pgsql-2.5.5-4.3mdvmes5.2.i586.rpm
http://www.mandriva.com/en/download/
References
Postfix SMTP Server Cyrus SASL Support Memory Corruption Vulnerability
References:
References:
- [Kolab-announce] Announcing the Kolab Server 2.3.2 (Christoph Wickert)
- Kolab Server 2.3.2 Release Notes (Kolab)
- Postfix Homepage (Wietse Venema)
- Vulnerability Note VU#727230 (US-CERT)
- Memory corruption in Postfix SMTP server Cyrus SASL support (CVE-2011-1720) ([email protected] (Wietse Venema))
- ASA-2011-164 postfix security update (RHSA-2011-0843) (Avaya)