Linode Forum
https://forum.linode.com/

Postfix seems to be sending out the database name and prefix
https://forum.linode.com/viewtopic.php?f=11&t=11011
Page 1 of 1

Author:  John Henry Eden [ Sat May 03, 2014 1:28 pm ]
Post subject:  Postfix seems to be sending out the database name and prefix

I installed Postfix on a Debian LAMP server to allow PHP to send emails from the web applications. I did minimal configuration; I only put in the domain to use when it asked.

The "Message-ID" in the email source contains the name of the database and the prefix used by the tables. This isn't technically a vulnerability, but it's undesirable.

Author:  Vance [ Sat May 17, 2014 6:38 pm ]
Post subject:  Re: Postfix seems to be sending out the database name and pr

Odd, according to the documentation, the Message-ID should be either YYYYMMDDHHMMSS.queueid@myhostname or queueID@myhostname based on the setting of enable_long_queue_ids. Is this information that's leaking possibly contained in myhostname?

Page 1 of 1 All times are UTC-04:00
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/