postfix: error in IPv6 handling [LWN.net]

Package(s):

postfix

CVE #(s):

CAN-2005-0337

Created:

February 4, 2005

Updated:

March 16, 2005

Description:

Jean-Samuel Reynaud noticed a programming error in the IPv6 handling code of Postfix when /proc/net/if_inet6 is not available. If "permit_mx_backup" was enabled in the "smtpd_recipient_restrictions", Postfix turned into an open relay, i. e. erroneously permitted the delivery of arbitrary mail to any MX host which has an IPv6 address.

Alerts:

Red Hat	RHSA-2005:152-01	2005-03-16
Ubuntu	USN-74-2	2005-02-04
Ubuntu	USN-74-1	2005-02-04

(Log in to post comments)

postfix: error in IPv6 handling

Posted Feb 10, 2005 2:20 UTC (Thu) by jeleinweber (subscriber, #8326) [Link]

I believe the IPv6 code with the bug is part of a 3rd party patch, not an official part of postfix. Default installs will have neither the functionality nor the hole.

-- Jim Leinweber