https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:27:58 +0000 https://cve.radiocsirt.org/vuln/certa-2011-avi-283 certa-2011-avi-283 https://cve.radiocsirt.org/vuln/certa-2011-avi-283 https://cve.radiocsirt.org/vuln/euvd-2026-114942 EUVD-2026-114942 https://cve.radiocsirt.org/vuln/euvd-2026-114942 https://cve.radiocsirt.org/vuln/fkie_cve-2011-1720 <p>The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails, which allows remote attackers to cause a denial of service (heap memory corruption and daemon crash) or possibly execute arbitrary code via an invalid AUTH command with one method followed by an AUTH command with a different method.</p> <p>The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails, which allows remote attackers to cause a denial of service (heap memory corruption and daemon crash) or possibly execute arbitrary code via an invalid AUTH command with one method followed by an AUTH command with a different method.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-1720 https://cve.radiocsirt.org/vuln/ghsa-8j5r-6hhw-hf9g <p>The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails, which allows remote attackers to cause a denial of service (heap memory corruption and daemon crash) or possibly execute arbitrary code via an invalid AUTH command with one method followed by an AUTH command with a different method.</p> <p>The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails, which allows remote attackers to cause a denial of service (heap memory corruption and daemon crash) or possibly execute arbitrary code via an invalid AUTH command with one method followed by an AUTH command with a different method.</p> https://cve.radiocsirt.org/vuln/ghsa-8j5r-6hhw-hf9g https://cve.radiocsirt.org/vuln/gsd-2011-1720 gsd-2011-1720 https://cve.radiocsirt.org/vuln/gsd-2011-1720 https://cve.radiocsirt.org/vuln/rhsa-2011:0843 <p>(smtpd): Crash due to improper management of SASL handlers for SMTP sessions</p> <p>(smtpd): Crash due to improper management of SASL handlers for SMTP sessions</p> https://cve.radiocsirt.org/vuln/rhsa-2011:0843