CVE-2011-1720 The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server hand...
MediumCVSS 6.8
EPSS 21.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails, which allows remote attackers to cause a denial of service (heap memory corruption and daemon crash) or possibly execute arbitrary code via an invalid AUTH command with one method followed by an AUTH command with a different method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| postfix | = 2.0.0 | No fix listed |
| postfix | = 2.0.1 | No fix listed |
| postfix | = 2.0.2 | No fix listed |
| postfix | = 2.0.3 | No fix listed |
| postfix | = 2.0.4 | No fix listed |
| postfix | = 2.0.5 | No fix listed |
| postfix | = 2.0.6 | No fix listed |
| postfix | = 2.0.7 | No fix listed |
| postfix | = 2.0.8 | No fix listed |
| postfix | = 2.0.9 | No fix listed |
| postfix | = 2.0.10 | No fix listed |
| postfix | = 2.0.11 | No fix listed |
| postfix | = 2.0.12 | No fix listed |
| postfix | = 2.0.13 | No fix listed |
| postfix | = 2.0.14 | No fix listed |
| postfix | = 2.0.15 | No fix listed |
| postfix | = 2.0.16 | No fix listed |
| postfix | = 2.0.17 | No fix listed |
| postfix | = 2.0.18 | No fix listed |
| postfix | = 2.0.19 | No fix listed |
| postfix | = 2.1.0 | No fix listed |
| postfix | = 2.1.1 | No fix listed |
| postfix | = 2.1.2 | No fix listed |
| postfix | = 2.1.3 | No fix listed |
| postfix | = 2.1.4 | No fix listed |
Show 87 more
| Product | Affected versions | Fixed in |
|---|---|---|
| postfix | = 2.1.5 | No fix listed |
| postfix | = 2.1.6 | No fix listed |
| postfix | = 2.2.0 | No fix listed |
| postfix | = 2.2.1 | No fix listed |
| postfix | = 2.2.2 | No fix listed |
| postfix | = 2.2.3 | No fix listed |
| postfix | = 2.2.4 | No fix listed |
| postfix | = 2.2.5 | No fix listed |
| postfix | = 2.2.6 | No fix listed |
| postfix | = 2.2.7 | No fix listed |
| postfix | = 2.2.8 | No fix listed |
| postfix | = 2.2.9 | No fix listed |
| postfix | = 2.2.10 | No fix listed |
| postfix | = 2.2.11 | No fix listed |
| postfix | = 2.2.12 | No fix listed |
| postfix | = 2.3 | No fix listed |
| postfix | = 2.3.0 | No fix listed |
| postfix | = 2.3.1 | No fix listed |
| postfix | = 2.3.2 | No fix listed |
| postfix | = 2.3.3 | No fix listed |
| postfix | = 2.3.4 | No fix listed |
| postfix | = 2.3.5 | No fix listed |
| postfix | = 2.3.6 | No fix listed |
| postfix | = 2.3.7 | No fix listed |
| postfix | = 2.3.8 | No fix listed |
| postfix | = 2.3.9 | No fix listed |
| postfix | = 2.3.10 | No fix listed |
| postfix | = 2.3.11 | No fix listed |
| postfix | = 2.3.12 | No fix listed |
| postfix | = 2.3.13 | No fix listed |
| postfix | = 2.3.14 | No fix listed |
| postfix | = 2.3.15 | No fix listed |
| postfix | = 2.3.16 | No fix listed |
| postfix | = 2.3.17 | No fix listed |
| postfix | = 2.3.18 | No fix listed |
| postfix | = 2.3.19 | No fix listed |
| postfix | = 2.4 | No fix listed |
| postfix | = 2.4.0 | No fix listed |
| postfix | = 2.4.1 | No fix listed |
| postfix | = 2.4.2 | No fix listed |
| postfix | = 2.4.3 | No fix listed |
| postfix | = 2.4.4 | No fix listed |
| postfix | = 2.4.5 | No fix listed |
| postfix | = 2.4.6 | No fix listed |
| postfix | = 2.4.7 | No fix listed |
| postfix | = 2.4.8 | No fix listed |
| postfix | = 2.4.9 | No fix listed |
| postfix | = 2.4.10 | No fix listed |
| postfix | = 2.4.11 | No fix listed |
| postfix | = 2.4.12 | No fix listed |
| postfix | = 2.4.13 | No fix listed |
| postfix | = 2.4.14 | No fix listed |
| postfix | = 2.4.15 | No fix listed |
| postfix | = 2.5.0 | No fix listed |
| postfix | = 2.5.1 | No fix listed |
| postfix | = 2.5.2 | No fix listed |
| postfix | = 2.5.3 | No fix listed |
| postfix | = 2.5.4 | No fix listed |
| postfix | = 2.5.5 | No fix listed |
| postfix | = 2.5.6 | No fix listed |
| postfix | = 2.5.7 | No fix listed |
| postfix | = 2.5.8 | No fix listed |
| postfix | = 2.5.9 | No fix listed |
| postfix | = 2.5.10 | No fix listed |
| postfix | = 2.5.11 | No fix listed |
| postfix | = 2.5.12 | No fix listed |
| postfix | = 2.6 | No fix listed |
| postfix | = 2.6.0 | No fix listed |
| postfix | = 2.6.1 | No fix listed |
| postfix | = 2.6.2 | No fix listed |
| postfix | = 2.6.3 | No fix listed |
| postfix | = 2.6.4 | No fix listed |
| postfix | = 2.6.5 | No fix listed |
| postfix | = 2.6.6 | No fix listed |
| postfix | = 2.6.7 | No fix listed |
| postfix | = 2.6.8 | No fix listed |
| postfix | = 2.6.9 | No fix listed |
| postfix | = 2.7.0 | No fix listed |
| postfix | = 2.7.1 | No fix listed |
| postfix | = 2.7.2 | No fix listed |
| postfix | = 2.7.3 | No fix listed |
| postfix | = 2.8.0 | No fix listed |
| postfix | = 2.8.1 | No fix listed |
| postfix | = 2.8.2 | No fix listed |
| debian/postfix(Debian:12) | < 2.8.3-1 | 2.8.3-1 |
| debian/postfix(Debian:13) | < 2.8.3-1 | 2.8.3-1 |
| debian/postfix(Debian:14) | < 2.8.3-1 | 2.8.3-1 |
References
- kb.juniper.net
- SUSE-SA:2011:023 vendor-advisory
- 44500 third-party-advisory vendor-advisory
- GLSA-201206-33 vendor-advisory
- 8247 third-party-advisory
- DSA-2233 vendor-advisory
- VU#727230 third-party-advisory us-government-resource
- [postfix-announce] 20110509 Memory corruption in Postfix SMTP server Cyrus SASL support (CVE-2011-1720) mailing-list
- MDVSA-2011:090 vendor-advisory
- 72259 vdb-entry
- www.postfix.org vendor-advisory
- www.postfix.org vendor-advisory
- 20110509 Memory corruption in Postfix SMTP server Cyrus SASL support (CVE-2011-1720) mailing-list
- 47778 patch vdb-entry
- 1025521 vdb-entry
- USN-1131-1 vendor-advisory
- bugzilla.redhat.com
- postfix-cyrus-sasl-code-exec(67359) vdb-entry
- Debian Security Tracker CVE-2011-1720 vendor-advisory