The remote host is affected by the vulnerability described in GLSA-200809-09 (Postfix: Denial of Service)

    It has been discovered than Postfix leaks an epoll file descriptor when     executing external commands, e.g. user-controlled $HOME/.forward or     $HOME/.procmailrc files. NOTE: This vulnerability only concerns Postfix     instances running on Linux 2.6 kernels.
  Impact :

    A local attacker could exploit this vulnerability to reduce the     performance of Postfix, and possibly trigger an assertion, resulting in     a Denial of Service.
  Workaround :

    Allow only trusted users to control delivery to non-Postfix commands.

根據其標題來判斷，遠端主機上執行的 Postfix 版本在從使用者的 .forward 檔案執行非 Postfix 命令時，會洩漏「epoll」檔案描述符號。本機攻擊者可存取洩漏的 epoll 描述符號，對 Postfix 發動拒絕服務攻擊。

請注意，此問題只會影響執行配搭 2.6 版核心的 Linux 系統的主機。

バナーによると、リモートホストで実行しているバージョンのPostfixは、ユーザーの.forwardファイルなどから非Postfixコマンドを実行する際に、「epoll」ファイル記述子を漏洩させます。ローカル攻撃者が、漏洩したepoll記述子にアクセスして、Postfixに対してサービス拒否攻撃を仕掛ける可能性があります。

この問題は、2.6カーネルを使用してLinuxを実行しているホストにのみ影響を与えます。

根据其标题，远程主机上运行的 Postfix 版本在执行用户的 .forward 文件等非 Postfix 命令时，会泄漏“epoll”文件描述符。本地攻击者可访问泄露的 epoll 描述符，以针对 Postfix 发起拒绝服务攻击。

请注意，此问题仅影响采用 2.6 内核运行的 Linux 主机。

New upstream patch level version 2.5.5, including multiple security fixes detailed in upstream announcements:
http://www.postfix.org/announcements/20080814.html http://www.postfix.org/announcements/20080902.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

When exectuting external programs postfix didn't close the file descriptor of the epoll system call. This could potentially be exploited to shutdown postfix (CVE-2008-3889).

According to its banner, the version of Postfix running on the remote host leaks 'epoll' file descriptors when it executes non-Postfix commands from, say, a user's .forward file. A local attacker can access the leaked epoll descriptor to launch a denial of service attack against Postfix.

Note that this issue only affects hosts running Linux with a 2.6 kernel.

A vulnerability in Postfix 2.4 and later was discovered, when running on Linux kernel 2.6, where a local user could cause a denial of service due to Postfix leaking the epoll file descriptor when executing non-Postfix commands (CVE-2008-3889).

The updated packages have been patched to correct this issue.

Wietse Venema discovered that Postfix leaked internal file descriptors when executing non-Postfix commands. A local attacker could exploit this to cause Postfix to run out of descriptors, leading to a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
34248	GLSA-200809-09 : Postfix: Denial of Service	Nessus	Gentoo Local Security Checks	2008/9/22	2021/1/6	low
34347	Postfix epoll 檔案描述元洩漏造成本機 DoS	Nessus	SMTP problems	2008/10/6	2022/4/11	low
34347	Postfix epollファイル記述子の漏洩のローカルDoS	Nessus	SMTP problems	2008/10/6	2022/4/11	low
34347	Postfix epoll 文件描述符泄漏本地 DoS	Nessus	SMTP problems	2008/10/6	2022/4/11	low
34376	Fedora 9 : postfix-2.5.5-1.fc9 (2008-8593)	Nessus	Fedora Local Security Checks	2008/10/10	2021/1/11	medium
40112	openSUSE Security Update : postfix (postfix-194)	Nessus	SuSE Local Security Checks	2009/7/21	2021/1/14	low
34347	Postfix epoll File Descriptor Leak Local DoS	Nessus	SMTP problems	2008/10/6	2022/4/11	low
34240	openSUSE 10 Security Update : postfix (postfix-5603)	Nessus	SuSE Local Security Checks	2008/9/18	2021/1/14	low
36736	Mandriva Linux Security Advisory : postfix (MDVSA-2008:190)	Nessus	Mandriva Local Security Checks	2009/4/23	2021/1/6	low
36904	Ubuntu 7.10 / 8.04 LTS : postfix vulnerability (USN-642-1)	Nessus	Ubuntu Local Security Checks	2009/4/23	2021/1/19	low
34377	Fedora 8 : postfix-2.5.5-1.fc8 (2008-8595)	Nessus	Fedora Local Security Checks	2008/10/10	2021/1/11	medium

検出

プラグインの検索

low

low

low

low

medium

low

low

low

low

low

medium