Novell Open Enterprise Server, Canonical Ltd. Ubuntu Linux, Debian GNU/Linux

ソフト名：Novell Open Enterprise Server 1.x/2.x, Canonical Ltd. Ubuntu Linux 6.06/8.04/10.04/10.10, Debian GNU/Linux 5.0/6.0 (Postfix 2.5.13未満/2.6.10未満/2.7.4未満/2.8.3未満)

回避策：SUSE-SA:2011:023にて対応, USN-1131-1にて対応, あり

脆弱性：DoS攻撃, システムアクセス, データ操作, 不正アクセス, リモートコード実行, テキストインジェクション

ソース：http://www.novell.com/products/openenterpriseserver/

http://www.ubuntu.com/

http://www.debian.org/

http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00002.html

https://lists.ubuntu.com/archives/ubuntu-security-announce/2011-May/001329.html

http://secunia.com/advisories/43646/

http://secunia.com/advisories/44500/

http://secunia.com/advisories/44517/

http://secunia.com/advisories/44519/

http://dvw-j.blogspot.com/2011/03/postfix.html

http://dvw-j.blogspot.com/2011/05/postfix.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2939

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0411

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1720

CVE：CVE-2009-2939, CVE-2011-0411, CVE-2011-1720

危険性：Medium Risk