Vulnerability CVE-2011-1720 - CERT Civis.Net

Vulnerability Name:

CVE-2011-1720 (CCN-67359)

Assigned:

2011-05-09

Published:

2011-05-09

Updated:

2018-10-09

Summary:

The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails, which allows remote attackers to cause a denial of service (heap memory corruption and daemon crash) or possibly execute arbitrary code via an invalid AUTH command with one method followed by an AUTH command with a different method.

CVSS v3 Severity:

7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
5.5 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

4.3 Medium (REDHAT CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P)
3.2 Low (REDHAT Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2011-1720

Source: CONFIRM
Type: UNKNOWN
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705

Source: CCN
Type: Kolab Web Site
Announcing the Kolab Server 2.3.2

Source: SUSE
Type: UNKNOWN
SUSE-SA:2011:023

Source: CCN
Type: RHSA-2011-0843
Moderate: postfix security update

Source: CCN
Type: SA44500
Postfix SMTP SASL Authentication Context Data Reuse Vulnerability

Source: SECUNIA
Type: Vendor Advisory
44500

Source: CCN
Type: SA44863
Kolab Server Multiple Vulnerabilities

Source: GENTOO
Type: UNKNOWN
GLSA-201206-33

Source: SREASON
Type: UNKNOWN
8247

Source: DEBIAN
Type: UNKNOWN
DSA-2233

Source: DEBIAN
Type: DSA-2233
postfix -- several vulnerabilities

Source: CCN
Type: US-CERT VU#727230
Postfix SMTP server Cyrus SASL support contains a memory corruption vulnerability

Source: CERT-VN
Type: US Government Resource
VU#727230

Source: MLIST
Type: UNKNOWN
[postfix-announce] 20110509 Memory corruption in Postfix SMTP server Cyrus SASL support (CVE-2011-1720)

Source: MANDRIVA
Type: UNKNOWN
MDVSA-2011:090

Source: OSVDB
Type: UNKNOWN
72259

Source: CCN
Type: OSVDB ID: 72259
Postfix SMTP Cyrus SASL Authentication Context Data Reuse Memory Corruption

Source: CONFIRM
Type: Vendor Advisory
http://www.postfix.org/announcements/postfix-2.8.3.html

Source: CCN
Type: Postfix Web Site
Memory corruption in Postfix SMTP server Cyrus SASL support (CVE-2011-1720)

Source: CONFIRM
Type: Vendor Advisory
http://www.postfix.org/CVE-2011-1720.html

Source: BUGTRAQ
Type: UNKNOWN
20110509 Memory corruption in Postfix SMTP server Cyrus SASL support (CVE-2011-1720)

Source: BID
Type: Patch
47778

Source: CCN
Type: BID-47778
Postfix SMTP Server Cyrus SASL Support Memory Corruption Vulnerability

Source: SECTRACK
Type: UNKNOWN
1025521

Source: UBUNTU
Type: UNKNOWN
USN-1131-1

Source: CONFIRM
Type: UNKNOWN
https://bugzilla.redhat.com/show_bug.cgi?id=699035

Source: XF
Type: UNKNOWN
postfix-cyrus-sasl-code-exec(67359)

Source: XF
Type: UNKNOWN
postfix-cyrus-sasl-code-exec(67359)

Vulnerable Configuration:

Configuration 1:

cpe:/a:postfix:postfix:2.0.0:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.0.1:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.0.2:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.0.3:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.0.4:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.0.5:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.0.6:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.0.7:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.0.8:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.0.9:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.0.10:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.0.11:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.0.12:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.0.13:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.0.14:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.0.15:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.0.16:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.0.17:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.0.18:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.0.19:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.1.0:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.1.1:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.1.2:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.1.3:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.1.4:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.1.5:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.1.6:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.2.0:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.2.1:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.2.2:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.2.3:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.2.4:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.2.5:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.2.6:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.2.7:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.2.8:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.2.9:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.2.10:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.2.11:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.2.12:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.3:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.3.0:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.3.1:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.3.2:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.3.3:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.3.4:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.3.5:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.3.6:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.3.7:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.3.8:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.3.9:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.3.10:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.3.11:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.3.12:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.3.13:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.3.14:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.3.15:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.3.16:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.3.17:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.3.18:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.3.19:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.0:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.1:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.2:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.3:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.4:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.5:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.6:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.7:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.8:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.9:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.10:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.11:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.12:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.13:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.14:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.4.15:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.0:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.1:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.2:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.3:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.4:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.5:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.6:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.7:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.8:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.9:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.10:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.11:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.5.12:*:*:*:*:*:*:*

Configuration 2:

cpe:/a:postfix:postfix:2.6:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6.0:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6.1:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6.2:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6.3:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6.4:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6.5:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6.6:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6.7:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6.8:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6.9:*:*:*:*:*:*:*

Configuration 3:

cpe:/a:postfix:postfix:2.7.0:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.7.1:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.7.2:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.7.3:*:*:*:*:*:*:*

Configuration 4:

cpe:/a:postfix:postfix:2.8.0:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.8.1:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.8.2:*:*:*:*:*:*:*

Configuration RedHat 1:

cpe:/o:redhat:enterprise_linux:4:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*

Configuration RedHat 3:

cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*

Configuration RedHat 4:

cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*

Configuration RedHat 5:

cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*

Configuration RedHat 6:

cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*

Configuration RedHat 7:

cpe:/o:redhat:enterprise_linux:5::server:*:*:*:*:*

Configuration RedHat 8:

cpe:/o:redhat:enterprise_linux:6:*:*:*:*:*:*:*

Configuration RedHat 9:

cpe:/o:redhat:enterprise_linux:6::server:*:*:*:*:*

Configuration CCN 1:

cpe:/a:postfix:postfix:2.5.0:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.6:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.7.0:*:*:*:*:*:*:*

OR cpe:/a:postfix:postfix:2.8.0:*:*:*:*:*:*:*

AND

cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:5:*:client:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:6:*:server:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:6:*:workstation:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_desktop:6:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_hpc_node:6:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_server_eus:6.1.z:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_eus:5.6.z::server:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_long_life:5.6:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20111720	V	CVE-2011-1720	2022-05-20
oval:org.mitre.oval:def:21899	P	RHSA-2011:0843: postfix security update (Moderate)	2015-03-09
oval:org.mitre.oval:def:13968	P	USN-1131-1 -- postfix vulnerability	2014-06-30
oval:org.mitre.oval:def:13019	P	DSA-2233-1 postfix -- several	2014-06-23
oval:org.mitre.oval:def:23665	P	ELSA-2011:0843: postfix security update (Moderate)	2014-05-26
oval:com.redhat.rhsa:def:20110843	P	RHSA-2011:0843: postfix security update (Moderate)	2011-05-31