NVD

Id
3751  
Name
CVE-2008-3889  
Description
Postfix 2.4 before 2.4.9, 2.5 before 2.5.5, and 2.6 before 2.6-20080902, when used with the Linux 2.6 kernel, leaks epoll file descriptors during execution of "non-Postfix" commands, which allows local users to cause a denial of service (application slowdown or exit) via a crafted command, as demonstrated by a command in a .forward file.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-03  
Published
2008-09-12  
Modified Date
2012-03-19  
Seq
2008-3889  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
23733 3751 CVE-2008-3889 SUSE-SR:2008:018  View
23734 3751 CVE-2008-3889 GLSA-200809-09  View
23735 3751 CVE-2008-3889 4239  View
23736 3751 CVE-2008-3889 1020800  View
23737 3751 CVE-2008-3889 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0311  View
23738 3751 CVE-2008-3889 MDVSA-2008:190  View
23739 3751 CVE-2008-3889 6472  View
23740 3751 CVE-2008-3889 http://www.postfix.org/announcements/20080902.html  View
23741 3751 CVE-2008-3889 20080902 Postfix Linux-only local denial of service  View
23742 3751 CVE-2008-3889 20080916 [Suspected Spam][CVE-2008-4042] Postfix Linux-only local denial of service - PoC  View
23743 3751 CVE-2008-3889 20081104 rPSA-2008-0311-1 postfix  View
23744 3751 CVE-2008-3889 30977  View
23745 3751 CVE-2008-3889 USN-642-1  View
23746 3751 CVE-2008-3889 http://www.wekk.net/research/CVE-2008-3889/  View
23747 3751 CVE-2008-3889 postfix-filedescriptor-dos(44865)  View
23748 3751 CVE-2008-3889 FEDORA-2008-8595  View
23749 3751 CVE-2008-3889 FEDORA-2008-8593  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46366 JVNDB-2008-001676 Postfix の epoll 関数における サービス運用妨害 (DoS) の脆弱性 Linux Kernel 2.6 上で稼動する Postfix には、Postfix に実装されていないコマンドを実行した場合、epoll 関数においてファイルディスクリプタの処理に不備があり、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2008-3889 34002 CVE-2008-3889 3751 2.1 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001676.html 2008-09-02 2008-09-26 View