CVE-2008-3889
published 2008-09-12CVE-2008-3889: Postfix 2.4 before 2.4.9, 2.5 before 2.5.5, and 2.6 before 2.6-20080902, when used with the Linux 2.6 kernel, leaks epoll file descriptors during execution of…
PriorityP412low2.1CVSS 2.0
AVLACLAuNCNINAP
EXPLOIT
EPSS
0.71%
48.7th percentile
Postfix 2.4 before 2.4.9, 2.5 before 2.5.5, and 2.6 before 2.6-20080902, when used with the Linux 2.6 kernel, leaks epoll file descriptors during execution of "non-Postfix" commands, which allows local users to cause a denial of service (application slowdown or exit) via a crafted command, as demonstrated by a command in a .forward file.
Affected
19 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | postfix | < postfix 2.5.5-1 (bookworm) | postfix 2.5.5-1 (bookworm) |
| postfix | postfix | — | — |
| postfix | postfix | — | — |
| postfix | postfix | — | — |
| postfix | postfix | — | — |
| postfix | postfix | — | — |
| postfix | postfix | — | — |
| postfix | postfix | — | — |
| postfix | postfix | — | — |
| postfix | postfix | — | — |
| postfix | postfix | — | — |
| postfix | postfix | — | — |
| postfix | postfix | — | — |
| postfix | postfix | — | — |
| postfix | postfix | — | — |
| postfix | postfix | >= 0 < 2.5.5-1 | 2.5.5-1 |
| postfix | postfix | >= 0 < 2.5.5-1 | 2.5.5-1 |
| postfix | postfix | >= 0 < 2.5.5-1 | 2.5.5-1 |
| postfix | postfix | >= 0 < 2.5.5-1 | 2.5.5-1 |
CVSS provenance
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:N/A:P
osv2.1LOW
vendor_debian2.1LOW
vendor_redhat2.1LOW
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Postfix vulnerability
vendor_ubuntu·2008-09-10
CVE-2008-3889 Postfix vulnerability
Title: Postfix vulnerability
Summary: Postfix vulnerability
Wietse Venema discovered that Postfix leaked internal file descriptors
when executing non-Postfix commands. A local attacker could exploit
this to cause Postfix to run out of descriptors, leading to a denial
of service.
Instructions: In general, a standard system upgrade is sufficient to effect the
necessary changes.
Red Hat
postfix: local DoS via leaked file descriptor
vendor_redhat·2008-09-02·CVSS 2.1
CVE-2008-3889 [LOW] postfix: local DoS via leaked file descriptor
postfix: local DoS via leaked file descriptor
Postfix 2.4 before 2.4.9, 2.5 before 2.5.5, and 2.6 before 2.6-20080902, when used with the Linux 2.6 kernel, leaks epoll file descriptors during execution of "non-Postfix" commands, which allows local users to cause a denial of service (application slowdown or exit) via a crafted command, as demonstrated by a command in a .forward file.
Statement: Not vulnerable. This issue did not affect the versions Postfix as shipped with Red Hat Enterprise Linux 3, 4, or 5.
Debian
CVE-2008-3889: postfix - Postfix 2.4 before 2.4.9, 2.5 before 2.5.5, and 2.6 before 2.6-20080902, when us...
vendor_debian·2008·CVSS 2.1
CVE-2008-3889 [LOW] CVE-2008-3889: postfix - Postfix 2.4 before 2.4.9, 2.5 before 2.5.5, and 2.6 before 2.6-20080902, when us...
Postfix 2.4 before 2.4.9, 2.5 before 2.5.5, and 2.6 before 2.6-20080902, when used with the Linux 2.6 kernel, leaks epoll file descriptors during execution of "non-Postfix" commands, which allows local users to cause a denial of service (application slowdown or exit) via a crafted command, as demonstrated by a command in a .forward file.
Scope: local
bookworm: resolved (fixed in 2.5.5-1)
bullseye: resolved (fixed in 2.5.5-1)
forky: resolved (fixed in 2.5.5-1)
sid: resolved (fixed in 2.5.5-1)
trixie: resolved (fixed in 2.5.5-1)
GHSA
GHSA-qgmw-69g2-f48g: Postfix 2
ghsa_unreviewed·2022-05-02
CVE-2008-3889 [LOW] CWE-20 GHSA-qgmw-69g2-f48g: Postfix 2
Postfix 2.4 before 2.4.9, 2.5 before 2.5.5, and 2.6 before 2.6-20080902, when used with the Linux 2.6 kernel, leaks epoll file descriptors during execution of "non-Postfix" commands, which allows local users to cause a denial of service (application slowdown or exit) via a crafted command, as demonstrated by a command in a .forward file.
OSV
CVE-2008-3889: Postfix 2
osv·2008-09-12·CVSS 2.1
CVE-2008-3889 [LOW] CVE-2008-3889: Postfix 2
Postfix 2.4 before 2.4.9, 2.5 before 2.5.5, and 2.6 before 2.6-20080902, when used with the Linux 2.6 kernel, leaks epoll file descriptors during execution of "non-Postfix" commands, which allows local users to cause a denial of service (application slowdown or exit) via a crafted command, as demonstrated by a command in a .forward file.
No detection rules found.
http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.htmlhttp://secunia.com/advisories/31716http://secunia.com/advisories/31800http://secunia.com/advisories/31982http://secunia.com/advisories/31986http://secunia.com/advisories/32231http://security.gentoo.org/glsa/glsa-200809-09.xmlhttp://securityreason.com/securityalert/4239http://securitytracker.com/id?1020800http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0311http://www.mandriva.com/security/advisories?name=MDVSA-2008:190http://www.postfix.org/announcements/20080902.htmlhttp://www.securityfocus.com/archive/1/495894/100/0/threadedhttp://www.securityfocus.com/archive/1/496420/100/0/threadedhttp://www.securityfocus.com/archive/1/498037/100/0/threadedhttp://www.securityfocus.com/bid/30977http://www.ubuntu.com/usn/usn-642-1http://www.wekk.net/research/CVE-2008-3889/https://exchange.xforce.ibmcloud.com/vulnerabilities/44865https://www.exploit-db.com/exploits/6472https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00271.htmlhttps://www.redhat.com/archives/fedora-package-announce/2008-October/msg00287.htmlhttp://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.htmlhttp://secunia.com/advisories/31716http://secunia.com/advisories/31800http://secunia.com/advisories/31982http://secunia.com/advisories/31986http://secunia.com/advisories/32231http://security.gentoo.org/glsa/glsa-200809-09.xmlhttp://securityreason.com/securityalert/4239http://securitytracker.com/id?1020800http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0311http://www.mandriva.com/security/advisories?name=MDVSA-2008:190http://www.postfix.org/announcements/20080902.htmlhttp://www.securityfocus.com/archive/1/495894/100/0/threadedhttp://www.securityfocus.com/archive/1/496420/100/0/threadedhttp://www.securityfocus.com/archive/1/498037/100/0/threadedhttp://www.securityfocus.com/bid/30977http://www.ubuntu.com/usn/usn-642-1http://www.wekk.net/research/CVE-2008-3889/https://exchange.xforce.ibmcloud.com/vulnerabilities/44865https://www.exploit-db.com/exploits/6472https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00271.htmlhttps://www.redhat.com/archives/fedora-package-announce/2008-October/msg00287.html
2008-09-12
Published