Debian GNU/Linux Sendmail包默认SASL密码漏洞

漏洞信息详情

Debian GNU/Linux Sendmail包默认SASL密码漏洞

• CNNVD编号：CNNVD-200412-120
• 危害等级： 高危
  
  
• CVE编号：
  CVE-2004-0833
  
• 漏洞类型：
  
  
  设计错误
  
• 发布时间：
  
  2004-12-23
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  debian
• 漏洞来源：
  Hugo Espuny disclo…

使用sasl和sasl-binDebian的 GNU/Linux的Sendmail 8.12.3以前版本使用带有固定用户名和密码的Sendmail脚本时存在漏洞。远程攻击者可以利用该漏洞将Sendmail作为开放邮件中继使用并发送spam信息。

The vendor has released an advisory (DSA 554-1) along with fixes to address this issue.
Debian Linux 3.0 hppa

• Debian libmilter-dev_8.12.3-7.1_hppa.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_
  8.12.3-7.1_hppa.deb
• Debian sendmail_8.12.3-7.1_hppa.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12.
  3-7.1_hppa.deb

Debian Linux 3.0 ppc

• Debian libmilter-dev_8.12.3-7.1_powerpc.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_
  8.12.3-7.1_powerpc.deb
• Debian sendmail_8.12.3-7.1_powerpc.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12.
  3-7.1_powerpc.deb

Debian Linux 3.0 s/390

• Debian libmilter-dev_8.12.3-7.1_s390.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_
  8.12.3-7.1_s390.deb
• Debian sendmail_8.12.3-7.1_s390.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12.
  3-7.1_s390.deb

Debian Linux 3.0

• Debian sendmail-doc_8.12.3-7.1_all.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-doc_8
  .12.3-7.1_all.deb

Debian Linux 3.0 arm

• Debian libmilter-dev_8.12.3-7.1_arm.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_
  8.12.3-7.1_arm.deb
• Debian sendmail_8.12.3-7.1_arm.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12.
  3-7.1_arm.deb

Debian Linux 3.0 alpha

• Debian libmilter-dev_8.12.3-7.1_alpha.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_
  8.12.3-7.1_alpha.deb
• Debian sendmail_8.12.3-7.1_alpha.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12.
  3-7.1_alpha.deb

Debian Linux 3.0 mips

• Debian libmilter-dev_8.12.3-7.1_mips.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_
  8.12.3-7.1_mips.deb
• Debian sendmail_8.12.3-7.1_mips.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12.
  3-7.1_mips.deb

Debian Linux 3.0 mipsel

• Debian libmilter-dev_8.12.3-7.1_mipsel.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_
  8.12.3-7.1_mipsel.deb
• Debian sendmail_8.12.3-7.1_mipsel.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12.
  3-7.1_mipsel.deb

Debian Linux 3.0 ia-32

• Debian libmilter-dev_8.12.3-7.1_i386.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_
  8.12.3-7.1_i386.deb
• Debian sendmail_8.12.3-7.1_i386.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12.
  3-7.1_i386.deb

Debian Linux 3.0 sparc

• Debian libmilter-dev_8.12.3-7.1_sparc.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_
  8.12.3-7.1_sparc.deb
• Debian sendmail_8.12.3-7.1_sparc.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12.
  3-7.1_sparc.deb

Debian Linux 3.0 m68k

• Debian libmilter-dev_8.12.3-7.1_m68k.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_
  8.12.3-7.1_m68k.deb
• Debian sendmail_8.12.3-7.1_m68k.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12.
  3-7.1_m68k.deb

Debian Linux 3.0 ia-64

• Debian libmilter-dev_8.12.3-7.1_ia64.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_
  8.12.3-7.1_ia64.deb
• Debian sendmail_8.12.3-7.1_ia64.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12.
  3-7.1_ia64.deb

来源: XF
名称: sendmail-mail-relay(17531)
链接:http://xforce.iss.net/xforce/xfdb/17531

来源: BID
名称: 11262
链接:http://www.securityfocus.com/bid/11262

来源: DEBIAN
名称: DSA-554
链接:http://www.debian.org/security/2004/dsa-554

来源: SECUNIA
名称: 12667
链接:http://secunia.com/advisories/12667