Debians sikkerhedsbulletin

DSA-093-1 postfix -- fjern-overbelastningsangreb

Rapporteret den:
12. dec 2001
Berørte pakker:
postfix
Sårbar:
Ja
Referencer i sikkerhedsdatabaser:
I Mitres CVE-ordbog: CVE-2001-0894.
Yderligere oplysninger:
Wietse Venema rapporterede at han har fundet en overbelastningssårbarhed ("denial of service"). i postfix. SMTP-forbindelsesloggen som postfix skriver til i debug-øjemed kunne vokse til en urimelig størrelse.

Dette er rettet i version 0.0.19991231pl11-2.

Rettet i:

Debian GNU/Linux 2.2 (potato)

Kildekode:
http://security.debian.org/dists/stable/updates/main/source/postfix_0.0.19991231pl11-2.diff.gz
http://security.debian.org/dists/stable/updates/main/source/postfix_0.0.19991231pl11-2.dsc
http://security.debian.org/dists/stable/updates/main/source/postfix_0.0.19991231pl11.orig.tar.gz
Alpha:
http://security.debian.org/dists/stable/updates/main/binary-alpha/postfix_0.0.19991231pl11-2_alpha.deb
ARM:
http://security.debian.org/dists/stable/updates/main/binary-arm/postfix_0.0.19991231pl11-2_arm.deb
Intel IA-32:
http://security.debian.org/dists/stable/updates/main/binary-i386/postfix_0.0.19991231pl11-2_i386.deb
Motorola 680x0:
http://security.debian.org/dists/stable/updates/main/binary-m68k/postfix_0.0.19991231pl11-2_m68k.deb
PowerPC:
http://security.debian.org/dists/stable/updates/main/binary-powerpc/postfix_0.0.19991231pl11-2_powerpc.deb
Sun Sparc:
http://security.debian.org/dists/stable/updates/main/binary-sparc/postfix_0.0.19991231pl11-2_sparc.deb

MD5-kontrolsummer for de listede filer findes i den originale sikkerhedsbulletin.