Security problem reported with Postfix

[Steen, Glenn]

> -----Original Message-----
> From: MailScanner mailing list 
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of John Clancy
> Sent: den 10 februari 2005 09:34
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Security problem reported with Postfix
> 
> 
> Hi Folks,
> 
> I'm sure most people on the list who might use Postfix are 
> already aware of
> this but I thought I should probably post it anyway

http://news.gmane.org/gmane.mail.postfix.announce/cutoff=75
Look at Wietses comment on Postfix vulnerability...
Not all of us using postfix would be affected, not even if we
do use linux.

-- Glenn

> 
> 21. Postfix IPv6 Unauthorized Mail Relay Vulnerability
> BugTraq ID: 12445
> Remote: Yes
> Date Published: Feb 04 2005
> Relevant URL: http://www.securityfocus.com/bid/12445
> Summary:
> Postfix is prone to a vulnerability that allows the 
> application to be abused
> as a mail relay.
> 
> Arbitrary mail may be sent to any MX host with an IPv6 
> address.  This could
> be exploited by spammers or other malicious parties.
> 
> Postfix 2.1.3 is reported prone to this issue.  It is 
> possible that other
> versions are affected as well.
> 
> 
> JC
> 
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> 
> Support MailScanner development - buy the book off the website!
> 

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!