Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Postfix | Wietse_venema | 2.1.3 (including) | 2.1.3 (including) |
Postfix | Ubuntu | dapper | * |
Postfix | Ubuntu | devel | * |
Postfix | Ubuntu | edgy | * |
Postfix | Ubuntu | feisty | * |
Red Hat Enterprise Linux 4 | RedHat | postfix-2:2.1.5-4.2.RHEL4 | * |