SUSE Linux Enterprise 10 SP3 (SLE10-SP3) and openSUSE 11.2 configures postfix to listen on all network interfaces, which might allow remote attackers to bypass intended access restrictions.
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
Link | Tags |
---|---|
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html | vendor advisory |
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00004.html | vendor advisory |