Vulnerability CVE-2011-0411 - CERT Civis.Net

Vulnerability Name:

CVE-2011-0411 (CCN-65932)

Assigned:

2011-03-05

Published:

2011-03-05

Updated:

2021-08-10

Summary:

The STARTTLS implementation in Postfix 2.4.x before 2.4.16, 2.5.x before 2.5.12, 2.6.x before 2.6.9, and 2.7.x before 2.7.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack.

CVSS v3 Severity:

7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

6.8 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

4.0 Medium (REDHAT CVSS v2 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:N)
3.0 Low (REDHAT Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): High Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): None

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2011-0411

Source: MITRE
Type: CNA
CVE-2011-1430

Source: MITRE
Type: CNA
CVE-2011-1431

Source: MITRE
Type: CNA
CVE-2011-1432

Source: MITRE
Type: CNA
CVE-2011-1506

Source: MITRE
Type: CNA
CVE-2011-1575

Source: CONFIRM
Type: UNKNOWN
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705

Source: CCN
Type: Kolab Web Site
Announcing the Kolab Server 2.3.2

Source: APPLE
Type: UNKNOWN
APPLE-SA-2011-10-12-3

Source: FEDORA
Type: UNKNOWN
FEDORA-2011-3394

Source: FEDORA
Type: UNKNOWN
FEDORA-2011-3355

Source: SUSE
Type: UNKNOWN
SUSE-SR:2011:009

Source: CCN
Type: RHSA-2011-0422
Moderate: postfix security update

Source: CCN
Type: RHSA-2011-0423
Moderate: postfix security update

Source: CCN
Type: SA43646
Postfix STARTTLS Plaintext Injection Vulnerability

Source: SECUNIA
Type: Vendor Advisory
43646

Source: CCN
Type: SA43676
Ipswitch IMail Server STARTTLS Plaintext Injection Vulnerability

Source: CCN
Type: SA43678
Kerio Connect STARTTLS Plaintext Injection Vulnerability

Source: SECUNIA
Type: UNKNOWN
43874

Source: CCN
Type: SA43988
Pure-FTPd STARTTLS Plaintext Injection Vulnerability

Source: CCN
Type: SA44301
Oracle Communications Messaging Server STARTTLS Plaintext Injection Vulnerability

Source: CCN
Type: SA44414
Cyrus IMAP Server STARTTLS Plaintext Injection Vulnerability

Source: CCN
Type: SA44863
Kolab Server Multiple Vulnerabilities

Source: CCN
Type: SA45857
SCOoffice Server "STARTTLS" Plaintext Injection Vulnerability

Source: GENTOO
Type: UNKNOWN
GLSA-201206-33

Source: SECTRACK
Type: UNKNOWN
1025179

Source: CONFIRM
Type: UNKNOWN
http://support.apple.com/kb/HT5002

Source: DEBIAN
Type: UNKNOWN
DSA-2233

Source: DEBIAN
Type: DSA-2233
postfix -- several vulnerabilities

Source: CCN
Type: Ipswitch, Inc. Web site
Mail Server, SMTP Server, Email Server - IMail Server

Source: CCN
Type: US-CERT VU#555316
STARTTLS plaintext command injection vulnerability

Source: CERT-VN
Type: US Government Resource
VU#555316

Source: CONFIRM
Type: US Government Resource
http://www.kb.cert.org/vuls/id/MORO-8ELH6Z

Source: CCN
Type: Oracle Critical Patch Update Advisory - April 2011
Oracle Critical Patch Update Advisory - April 2011

Source: CONFIRM
Type: UNKNOWN
http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html

Source: OSVDB
Type: UNKNOWN
71021

Source: CCN
Type: OSVDB ID: 71020
Ipswitch IMail Server STARTTLS Arbitrary Plaintext Command Injection

Source: CCN
Type: OSVDB ID: 71021
Postfix STARTTLS Arbitrary Plaintext Command Injection

Source: CCN
Type: OSVDB ID: 71854
Kerio Connect STARTTLS Arbitrary Plaintext Command Injection

Source: CCN
Type: OSVDB ID: 71855
Pure-FTPd STARTTLS Arbitrary Plaintext Command Injection

Source: CCN
Type: OSVDB ID: 71946
Oracle Sun Java System Messaging Server SMTP Server / IMAP Server / POP Server STARTTLS Arbitrary Plaintext Command Injection

Source: CCN
Type: OSVDB ID: 72186
Cyrus IMAP Server STARTTLS Arbitrary Plaintext Command Injection

Source: CCN
Type: OSVDB ID: 75014
SCO SCOoffice Server STARTTLS I/O Buffering MiTM Plaintext Command Injection

Source: CCN
Type: OSVDB ID: 75256
netqmail qmail-smtpd qmail-smtpd.c STARTTLS I/O Buffering MiTM Plaintext Command Injection

Source: CCN
Type: Postfix Web Site
Plaintext command injection in multiple implementations of STARTTLS (CVE-2011-0411)

Source: CONFIRM
Type: Exploit, Vendor Advisory
http://www.postfix.org/CVE-2011-0411.html

Source: REDHAT
Type: UNKNOWN
RHSA-2011:0422

Source: REDHAT
Type: UNKNOWN
RHSA-2011:0423

Source: BID
Type: UNKNOWN
46767

Source: CCN
Type: BID-46767
Multiple Vendors STARTTLS Implementation Plaintext Arbitrary Command Injection Vulnerability

Source: VUPEN
Type: Vendor Advisory
ADV-2011-0611

Source: VUPEN
Type: UNKNOWN
ADV-2011-0752

Source: VUPEN
Type: UNKNOWN
ADV-2011-0891

Source: CCN
Type: WatchGuard Web site
Release Notes for WatchGuard XCS v9.1 TLS Hotfix

Source: XF
Type: UNKNOWN
multiple-starttls-command-execution(65932)

Source: XF
Type: UNKNOWN
multiple-starttls-command-execution(65932)

Source: SUSE
Type: SUSE-SR:2011:008
SUSE Security Summary Report

Source: SUSE
Type: SUSE-SR:2011:009
SUSE Security Summary Report

Vulnerable Configuration:

Configuration 1:

cpe:/a:postfix:postfix:2.4:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.4:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.0:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.9:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.8:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.6:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.5:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.14:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.15:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.3:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.2:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.10:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.11:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.1:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.7:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.12:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.13:*:*:*:*:*:*:*

Configuration 2:

cpe:/a:postfix:postfix:2.5.0:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.8:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.9:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.6:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.7:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.5:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.3:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.4:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.10:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.11:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.1:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.2:*:*:*:*:*:*:*

Configuration 3:

cpe:/a:postfix:postfix:2.6.2:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6.3:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6.0:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6.1:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6.8:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6.4:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6.5:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6.6:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6.7:*:*:*:*:*:*:*

Configuration 4:

cpe:/a:postfix:postfix:2.7.0:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.7.1:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.7.2:*:*:*:*:*:*:*

Configuration RedHat 1:

cpe:/o:redhat:enterprise_linux:4:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*

Configuration RedHat 3:

cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*

Configuration RedHat 4:

cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*

Configuration RedHat 5:

cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*

Configuration RedHat 6:

cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*

Configuration RedHat 7:

cpe:/o:redhat:enterprise_linux:5::server:*:*:*:*:*

Configuration RedHat 8:

cpe:/o:redhat:enterprise_linux:6:*:*:*:*:*:*:*

Configuration RedHat 9:

cpe:/o:redhat:enterprise_linux:6::client:*:*:*:*:*

Configuration RedHat 10:

cpe:/o:redhat:enterprise_linux:6::computenode:*:*:*:*:*

Configuration RedHat 11:

cpe:/o:redhat:enterprise_linux:6::server:*:*:*:*:*

Configuration RedHat 12:

cpe:/o:redhat:enterprise_linux:6::workstation:*:*:*:*:*

Configuration CCN 1:

cpe:/a:postfix:postfix:2.4.8:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.4:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.3:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.2:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.1:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.7:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.6:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.5:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.0:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.9:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.10:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.11:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.12:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.13:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.14:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.15:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.0:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.5:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.3:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.4:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.1:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.2:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.6:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.7:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.8:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.9:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.10:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.11:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6.0:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6.1:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6.2:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6.3:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6.4:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6.5:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6.6:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6.7:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6.8:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.7.0:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.7.1:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.7.2:*:*:*:*:*:*:*

AND

cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:5:*:client:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:6:*:server:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:6:*:workstation:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_desktop:6:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_hpc_node:6:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_eus:5.6.z::server:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_long_life:5.6:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:42427	P	Security update for tiff (Low)	2022-08-03
oval:org.opensuse.security:def:20110411	V	CVE-2011-0411	2022-06-30
oval:org.opensuse.security:def:113183	P	pure-ftpd-1.0.43-1.3 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:31755	P	Security update for libvirt (Important)	2022-01-10
oval:org.opensuse.security:def:32240	P	Security update for the Linux Kernel (Live Patch 41 for SLE 12 SP3) (Important)	2021-12-14
oval:org.opensuse.security:def:31704	P	Security update for samba (Important)	2021-11-19
oval:org.opensuse.security:def:26168	P	Security update for the Linux Kernel (Important)	2021-11-19
oval:org.opensuse.security:def:31290	P	Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP3) (Important)	2021-10-18
oval:org.opensuse.security:def:32201	P	Security update for MozillaFirefox (Important)	2021-10-15
oval:org.opensuse.security:def:32197	P	Security update for glibc (Moderate)	2021-10-06
oval:org.opensuse.security:def:106604	P	pure-ftpd-1.0.43-1.3 on GA media (Moderate)	2021-10-01
oval:org.opensuse.security:def:31278	P	Security update for xen (Important)	2021-09-23
oval:org.opensuse.security:def:26137	P	Security update for sqlite3 (Important)	2021-09-23
oval:org.opensuse.security:def:31279	P	Security update for sqlite3 (Important)	2021-09-23
oval:org.opensuse.security:def:42218	P	Security update for openssl-1_1 (Low)	2021-09-21
oval:org.opensuse.security:def:32983	P	Security update for cpio (Important)	2021-08-23
oval:org.opensuse.security:def:32152	P	Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP3) (Important)	2021-07-27
oval:org.opensuse.security:def:26093	P	Security update for dbus-1 (Important)	2021-07-21
oval:org.opensuse.security:def:31645	P	Security update for ovmf (Important)	2021-06-22
oval:org.opensuse.security:def:26079	P	Security update for gupnp (Important)	2021-06-18
oval:org.opensuse.security:def:32944	P	Security update for libjpeg-turbo (Moderate)	2021-06-11
oval:org.opensuse.security:def:42684	P	pure-ftpd-1.0.22-3.25.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36277	P	pure-ftpd-1.0.22-3.25.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:32110	P	Security update for gstreamer-plugins-bad (Important)	2021-06-07
oval:org.opensuse.security:def:26040	P	Security update for gdm (Important)	2021-04-28
oval:org.opensuse.security:def:31364	P	Security update for the Linux Kernel (Live Patch 32 for SLE 12 SP3) (Important)	2021-03-17
oval:org.opensuse.security:def:31743	P	Security update for python (Moderate)	2021-03-16
oval:org.opensuse.security:def:26199	P	Security update for ImageMagick (Moderate)	2021-02-25
oval:org.opensuse.security:def:32262	P	Security update for java-1_8_0-openjdk (Moderate)	2021-02-19
oval:org.opensuse.security:def:31732	P	Security update for krb5-appl (Important)	2021-02-19
oval:org.opensuse.security:def:26146	P	Security update for python3 (Important)	2021-02-08
oval:org.opensuse.security:def:26111	P	Security update for cups (Moderate)	2021-02-02
oval:org.opensuse.security:def:32096	P	Security update for dnsmasq (Important)	2021-01-19
oval:org.opensuse.security:def:26030	P	Security update for php72 (Moderate)	2021-01-14
oval:org.opensuse.security:def:31744	P	Security update for MozillaFirefox (Important)	2021-01-12
oval:org.opensuse.security:def:32098	P	Security update for dovecot22 (Important)	2021-01-04
oval:org.opensuse.security:def:31572	P	Security update for xen (Moderate)	2020-12-29
oval:org.opensuse.security:def:36020	P	pure-ftpd-1.0.22-3.19.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35811	P	pure-ftpd-1.0.22-3.15.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:31487	P	Security update for python (Moderate)	2020-12-01
oval:org.opensuse.security:def:25787	P	Security update for libwmf (Moderate)	2020-12-01
oval:org.opensuse.security:def:26558	P	gnutls on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:32053	P	Security update for kvm (Important)	2020-12-01
oval:org.opensuse.security:def:26287	P	Security update for zeromq (Moderate)	2020-12-01
oval:org.opensuse.security:def:27275	P	pure-ftpd on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:32353	P	Security update for squid3 (Moderate)	2020-12-01
oval:org.opensuse.security:def:26983	P	libzip1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25838	P	Security update for flash-player (Important)	2020-12-01
oval:org.opensuse.security:def:31940	P	Recommended update for glibc (Moderate)	2020-12-01
oval:org.opensuse.security:def:25570	P	Security update for mailman (Important)	2020-12-01
oval:org.opensuse.security:def:32497	P	cron on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25361	P	Security update for tomcat (Important)	2020-12-01
oval:org.opensuse.security:def:25773	P	Security update for flash-player (Important)	2020-12-01
oval:org.opensuse.security:def:31944	P	Security update for gnutls (Moderate)	2020-12-01
oval:org.opensuse.security:def:33201	P	lxc on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25437	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:26403	P	Security update for ffmpeg (Moderate)	2020-12-01
oval:org.opensuse.security:def:32306	P	Security update for python (Moderate)	2020-12-01
oval:org.opensuse.security:def:25995	P	Security update for mariadb (Moderate)	2020-12-01
oval:org.opensuse.security:def:32054	P	Security update for kvm (Important)	2020-12-01
oval:org.opensuse.security:def:31486	P	Security update for python (Moderate)	2020-12-01
oval:org.opensuse.security:def:25703	P	Security update for squid (Moderate)	2020-12-01
oval:org.opensuse.security:def:26544	P	fetchmail on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31961	P	Security update for guile (Low)	2020-12-01
oval:org.opensuse.security:def:26248	P	Security update for freerdp (Moderate)	2020-12-01
oval:org.opensuse.security:def:32775	P	pure-ftpd on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25991	P	Security update for ImageMagick (Important)	2020-12-01
oval:org.opensuse.security:def:27240	P	mipv6d on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26345	P	Security update for libgit2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:25827	P	Security update for flash-player (Critical)	2020-12-01
oval:org.opensuse.security:def:31853	P	Security update for coreutils (Important)	2020-12-01
oval:org.opensuse.security:def:25569	P	Security update for tomcat (Important)	2020-12-01
oval:org.opensuse.security:def:31588	P	Security update for tcpdump (Moderate)	2020-12-01
oval:org.opensuse.security:def:32458	P	Security update for xorg-x11-libX11 (Moderate)	2020-12-01
oval:org.opensuse.security:def:26810	P	pure-ftpd on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25645	P	Security update for the Linux Kernel (Critical)	2020-12-01
oval:org.opensuse.security:def:31888	P	Security update for evince (Moderate)	2020-12-01
oval:org.opensuse.security:def:32563	P	libpulse-browse0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25373	P	Security update for libX11 (Important)	2020-12-01
oval:org.opensuse.security:def:26252	P	Security update for mariadb-100 (Moderate)	2020-12-01
oval:org.opensuse.security:def:25911	P	Security update for gstreamer-plugins-base (Low)	2020-12-01
oval:org.opensuse.security:def:32032	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:25646	P	Security update for tomcat (Moderate)	2020-12-01
oval:org.opensuse.security:def:26505	P	Security update for phpMyAdmin (Moderate)	2020-12-01
oval:org.opensuse.security:def:31829	P	Security update for bind (Important)	2020-12-01
oval:org.opensuse.security:def:32736	P	libvirt on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31498	P	Security update for python-numpy (Important)	2020-12-01
oval:org.opensuse.security:def:25938	P	Security update for evince (Important)	2020-12-01
oval:org.opensuse.security:def:26602	P	libsndfile on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26301	P	Security update for gd (Moderate)	2020-12-01
oval:org.opensuse.security:def:25826	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:31796	P	Security update for MozillaFirefox, mozilla-nspr, mozilla-nss (Important)	2020-12-01
oval:org.opensuse.security:def:31496	P	Security update for python-imaging	2020-12-01
oval:org.opensuse.security:def:32409	P	Security update for wget (Moderate)	2020-12-01
oval:org.opensuse.security:def:27018	P	pure-ftpd on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25902	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:26775	P	libxslt on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25581	P	Security update for perl-XML-Twig (Moderate)	2020-12-01
oval:org.opensuse.security:def:32519	P	ghostscript-fonts-other on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25362	P	Security update for mailman (Important)	2020-12-01
oval:org.opensuse.security:def:25854	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:31993	P	Security update for java-1_7_1-ibm (Moderate)	2020-12-01
oval:org.opensuse.security:def:33240	P	pure-ftpd on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25565	P	Security update for SUSE Manager Client Tools (Moderate)	2020-12-01
oval:org.opensuse.security:def:26456	P	Security update for MozillaThunderbird (Important)	2020-12-01
oval:org.mitre.oval:def:13293	P	USN-1113-1 -- postfix vulnerabilities	2014-06-30
oval:org.mitre.oval:def:15217	P	DSA-2346-2 proftpd-dfsg -- several	2014-06-23
oval:org.mitre.oval:def:15394	P	DSA-2346-1 proftpd-dfsg -- several	2014-06-23
oval:org.mitre.oval:def:13019	P	DSA-2233-1 postfix -- several	2014-06-23
oval:org.mitre.oval:def:23277	P	ELSA-2011:0422: postfix security update (Moderate)	2014-05-26
oval:org.mitre.oval:def:23454	P	ELSA-2011:0423: postfix security update (Moderate)	2014-05-26
oval:org.mitre.oval:def:21792	P	RHSA-2011:0423: postfix security update (Moderate)	2014-02-24
oval:org.mitre.oval:def:21591	P	RHSA-2011:0422: postfix security update (Moderate)	2014-02-24
oval:com.redhat.rhsa:def:20110422	P	RHSA-2011:0422: postfix security update (Moderate)	2011-04-06
oval:com.redhat.rhsa:def:20110423	P	RHSA-2011:0423: postfix security update (Moderate)	2011-04-06