CVE-2011-0411

Publication date 16 March 2011

Last updated 24 July 2024


Ubuntu priority

The STARTTLS implementation in Postfix 2.4.x before 2.4.16, 2.5.x before 2.5.12, 2.6.x before 2.6.9, and 2.7.x before 2.7.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack.

Read the notes from the security team

Status

Package Ubuntu Release Status
postfix 10.10 maverick
Fixed 2.7.1-1ubuntu0.1
10.04 LTS lucid
Fixed 2.7.0-1ubuntu0.1
9.10 karmic
Fixed 2.6.5-3ubuntu0.1
8.04 LTS hardy
Fixed 2.5.1-2ubuntu1.3
6.06 LTS dapper
Fixed 2.2.10-1ubuntu0.3

Notes


mdeslaur

postfix 2.8 and 2.9 are not affected

References

Related Ubuntu Security Notices (USN)

    • USN-1113-1
    • Postfix vulnerabilities
    • 18 April 2011

Other references