From owner-freebsd-security  Thu Nov 15 11:38:46 2001
Delivered-To: freebsd-security@freebsd.org
Received: from peitho.fxp.org (peitho.fxp.org [209.26.95.40])
	by hub.freebsd.org (Postfix) with ESMTP id 1609937B416
	for <freebsd-security@freebsd.org>; Thu, 15 Nov 2001 11:38:42 -0800 (PST)
Received: by peitho.fxp.org (Postfix, from userid 1501)
	id D406013651; Thu, 15 Nov 2001 14:38:40 -0500 (EST)
Date: Thu, 15 Nov 2001 14:38:40 -0500
From: Chris Faulhaber <jedgar@fxp.org>
To: Krzysztof Zaraska <kzaraska@student.uci.agh.edu.pl>
Cc: freebsd-security@freebsd.org
Subject: Re: Postfix Memory Exhaustion Attack
Message-ID: <20011115143840.A33388@peitho.fxp.org>
Mail-Followup-To: Chris Faulhaber <jedgar@fxp.org>,
	Krzysztof Zaraska <kzaraska@student.uci.agh.edu.pl>,
	freebsd-security@freebsd.org
References: <Pine.BSF.4.21.0111152006380.919-100000@lhotse.zaraska.dhs.org>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="sm4nu43k4a2Rpi4c"
Content-Disposition: inline
In-Reply-To: <Pine.BSF.4.21.0111152006380.919-100000@lhotse.zaraska.dhs.org>
User-Agent: Mutt/1.3.20i
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org


--sm4nu43k4a2Rpi4c
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Nov 15, 2001 at 08:14:14PM +0100, Krzysztof Zaraska wrote:
> Wieste Venema has posted information about Postfix SMTP server memory
> exhaustion attack on BUGTRAQ. You may read it at:
>=20
> http://www.securityfocus.org/archive/1/240354
>=20
> The patch is included.=20
>=20
> FreeBSD port is probably vulnerable (can someone confirm this?).=20
>=20

=2E..and was updated a few hours ago.

--=20
Chris D. Faulhaber - jedgar@fxp.org - jedgar@FreeBSD.org
--------------------------------------------------------
FreeBSD: The Power To Serve   -   http://www.FreeBSD.org

--sm4nu43k4a2Rpi4c
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: FreeBSD: The Power To Serve

iEYEARECAAYFAjv0GcAACgkQObaG4P6BelBwBgCfVR0vL/OGeyvzydKMi3CVWbce
e+MAn31otTzlcKQ0nKYB2ZwmXIEwaYHG
=uvEi
-----END PGP SIGNATURE-----

--sm4nu43k4a2Rpi4c--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message