A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux Enterprise Desktop 15 SP5 postfix, SUSE SUSE Linux Enterprise High Performance Computing 15 SP5 postfix, SUSE openSUSE Leap 15.5 postfix.This issue affects SUSE Linux Enterprise Desktop 15 SP5: before 3.7.3-150500.3.5.1; SUSE Linux Enterprise High Performance Computing 15 SP5: before 3.7.3-150500.3.5.1; openSUSE Leap 15.5 : before 3.7.3-150500.3.5.1.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3945-1 advisory.

    Security fixes:

    - CVE-2023-32182: Fixed config_postfix SUSE specific script using potentially bad /tmp file (bsc#1211196).

    Other fixes:

    - postfix: config.postfix causes too tight permission on main.cf (bsc#1215372).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2023:3791-1 advisory.

    Security fixes:

    - CVE-2023-32182: Fixed config_postfix SUSE specific script using potentially bad /tmp file (bsc#1211196).

    Other fixes:

    - postfix: config.postfix causes too tight permission on main.cf (bsc#1215372).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3732-1 advisory.

    Security fixes:

    - CVE-2023-32182: Fixed config_postfix SUSE specific script using potentially bad /tmp file (bsc#1211196).

    Other fixes:

    - postfix: config.postfix causes too tight permission on main.cf (bsc#1215372).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3394-1 advisory.

    - CVE-2023-32182: Fixed config_postfix SUSE specific script potentially bad /tmp file usage (bsc#1211196).

    - Update to from 3.7.2 to 3.7.3:
      - Fixes a bug where some messages were not delivered after 'warning: Unexpected record type 'X'.
    (bsc#1213515)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
182505	SUSE SLED15: postfix / postfix-bdb / postfix-bdb-lmdb / postfix-devel / etc (SUSE-SU-2023:3945-1)	Nessus	SuSE Local Security Checks	Local	high
181903	openSUSE 15 Security Update : postfix (SUSE-SU-2023:3791-1)	Nessus	SuSE Local Security Checks	Local	high
181825	SUSE SLES12 Security Update : postfix (SUSE-SU-2023:3732-1)	Nessus	SuSE Local Security Checks	Local	high
180141	SUSE SLED15: postfix / postfix-bdb / postfix-bdb-lmdb / postfix-devel / etc (SUSE-SU-2023:3394-1)	Nessus	SuSE Local Security Checks	Local	high

Detections

Analytics

CVE-2023-32182

high

Tenable Plugins

high

high

high

high