ID de Prueba:	1.3.6.1.4.1.25623.1.0.69770
Categoría:	FreeBSD Local Security Checks
Título:	FreeBSD Ports: postfix, postfix-base
Resumen:	The remote host is missing an update to the system; as announced in the referenced advisory.
Descripción:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following packages are affected: postfix postfix-base postfix-current postfix-current-base CVE-2011-1720 The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails, which allows remote attackers to cause a denial of service (heap memory corruption and daemon crash) or possibly execute arbitrary code via an invalid AUTH command with one method followed by an AUTH command with a different method. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1720 BugTraq ID: 47778 http://www.securityfocus.com/bid/47778 Bugtraq: 20110509 Memory corruption in Postfix SMTP server Cyrus SASL support (CVE-2011-1720) (Google Search) http://www.securityfocus.com/archive/1/517917/100/0/threaded CERT/CC vulnerability note: VU#727230 http://www.kb.cert.org/vuls/id/727230 Debian Security Information: DSA-2233 (Google Search) http://www.debian.org/security/2011/dsa-2233 http://security.gentoo.org/glsa/glsa-201206-33.xml http://www.mandriva.com/security/advisories?name=MDVSA-2011:090 http://www.mail-archive.com/postfix-announce@postfix.org/msg00007.html http://www.osvdb.org/72259 http://www.securitytracker.com/id?1025521 http://secunia.com/advisories/44500 http://securityreason.com/securityalert/8247 SuSE Security Announcement: SUSE-SA:2011:023 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00002.html http://www.ubuntu.com/usn/usn-1131-1 XForce ISS Database: postfix-cyrus-sasl-code-exec(67359) https://exchange.xforce.ibmcloud.com/vulnerabilities/67359
Copyright	Copyright (C) 2011 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.