[CentOS] Fwd: Obsolete NSA exploit for Postfix 2.0 - 2.2

Mon Apr 10 00:08:38 UTC 2017
Robert Moskowitz <rgm at htt-consult.com>

This was just posted on the Postfix list.  Centos 7 ships with: 

Has this cert advisory been applied to the Centos build of Postfix?

thank you

-------- Forwarded Message --------
Subject: 	Obsolete NSA exploit for Postfix 2.0 - 2.2
Date: 	Sun, 9 Apr 2017 16:18:06 -0400 (EDT)
From: 	Wietse Venema <wietse at porcupine.org>
To: 	Postfix users <postfix-users at postfix.org>
CC: 	Postfix announce <postfix-announce at postfix.org>

A recent twitter post reveals the existence of an exploit for Postfix,
in a collection of what appear to be NSA tools.


This is an exploit for Postfix 2.0 - 2.2, for a bug that was fixed
11 years ago in Postfix 2.2.11 and later.

There was a memory corruption bug in a Postfix workaround for a
Sendmail bug (CERT advisory CA-2003-07, remote buffer overflow when
message headers contain lots of comment text before an email address).

Technical details: the Postfix strip_address() function, which
removes large comments from a mail header, called the printable()
function on a string that wasn't null-terminated. This caused the
printable() function to scribble past the end of malloc()ed memory,
corrupting the memory heap.

Running the exploit against Postfix versions less than 11 years old
results in odd-looking email messages in the super-user's mailbox,
and warning messages in the maillog file (warning: stripping too
many comments from address: <long character string>).