Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2008-3889

Опубликовано: 12 сент. 2008
Источник: nvd
CVSS2: 2.1
EPSS Низкий

Описание

Postfix 2.4 before 2.4.9, 2.5 before 2.5.5, and 2.6 before 2.6-20080902, when used with the Linux 2.6 kernel, leaks epoll file descriptors during execution of "non-Postfix" commands, which allows local users to cause a denial of service (application slowdown or exit) via a crafted command, as demonstrated by a command in a .forward file.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*

Одно из

cpe:2.3:a:postfix:postfix:2.4:*:*:*:*:*:*:*
cpe:2.3:a:postfix:postfix:2.4.0:*:*:*:*:*:*:*
cpe:2.3:a:postfix:postfix:2.4.1:*:*:*:*:*:*:*
cpe:2.3:a:postfix:postfix:2.4.2:*:*:*:*:*:*:*
cpe:2.3:a:postfix:postfix:2.4.3:*:*:*:*:*:*:*
cpe:2.3:a:postfix:postfix:2.4.4:*:*:*:*:*:*:*
cpe:2.3:a:postfix:postfix:2.4.5:*:*:*:*:*:*:*
cpe:2.3:a:postfix:postfix:2.4.6:*:*:*:*:*:*:*
cpe:2.3:a:postfix:postfix:2.4.7:*:*:*:*:*:*:*
cpe:2.3:a:postfix:postfix:2.4.8:*:*:*:*:*:*:*
cpe:2.3:a:postfix:postfix:2.5.1:*:*:*:*:*:*:*
cpe:2.3:a:postfix:postfix:2.5.2:*:*:*:*:*:*:*
cpe:2.3:a:postfix:postfix:2.5.3:*:*:*:*:*:*:*
cpe:2.3:a:postfix:postfix:2.6:*:*:*:*:*:*:*

EPSS

Процентиль: 20%
0.00064
Низкий

2.1 Low

CVSS2

Дефекты

CWE-20

Связанные уязвимости

ubuntu
почти 17 лет назад

Postfix 2.4 before 2.4.9, 2.5 before 2.5.5, and 2.6 before 2.6-20080902, when used with the Linux 2.6 kernel, leaks epoll file descriptors during execution of "non-Postfix" commands, which allows local users to cause a denial of service (application slowdown or exit) via a crafted command, as demonstrated by a command in a .forward file.

redhat
почти 17 лет назад

Postfix 2.4 before 2.4.9, 2.5 before 2.5.5, and 2.6 before 2.6-20080902, when used with the Linux 2.6 kernel, leaks epoll file descriptors during execution of "non-Postfix" commands, which allows local users to cause a denial of service (application slowdown or exit) via a crafted command, as demonstrated by a command in a .forward file.

debian
почти 17 лет назад

Postfix 2.4 before 2.4.9, 2.5 before 2.5.5, and 2.6 before 2.6-2008090 ...

github
больше 3 лет назад

Postfix 2.4 before 2.4.9, 2.5 before 2.5.5, and 2.6 before 2.6-20080902, when used with the Linux 2.6 kernel, leaks epoll file descriptors during execution of "non-Postfix" commands, which allows local users to cause a denial of service (application slowdown or exit) via a crafted command, as demonstrated by a command in a .forward file.

EPSS

Процентиль: 20%
0.00064
Низкий

2.1 Low

CVSS2

Дефекты

CWE-20