Test ID:	1.3.6.1.4.1.25623.1.0.51301
Category:	Ubuntu Local Security Checks
Title:	Ubuntu 4.10 USN-74-1 (postfix)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to postfix announced via advisory USN-74-1. Jean-Samuel Reynaud noticed a programming error in the IPv6 handling code of Postfix when /proc/net/if_inet6 is not available (which is the case in Ubuntu since Postfix runs in a chroot). If 'permit_mx_backup' was enabled in the 'smtpd_recipient_restrictions', Postfix turned into an open relay, i. e. erroneously permitted the delivery of arbitrary mail to any MX host which has an IPv6 address. The following packages are affected: postfix Solution: The problem can be corrected by upgrading the affected package to version 2.1.3-1ubuntu17.1. In general, a standard system upgrade is sufficient to effect the necessary changes. http://lists.ubuntu.com/archives/ubuntu-security-announce/2005-February/000076.html http://bugs.debian.org/267837 Risk factor : High
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.