[SECURITY] [DSA 534-1] New mailreader packages fix directory traversal vulnerability

From: Matt Zimmerman (mdz_at_debian.org)
Date: 07/23/04

  • Next message: Rob Rosenberger: "mi2g attacks "so-called" security sites" 
    Date: Thu, 22 Jul 2004 20:54:09 -0700
To: bugtraq@securityfocus.com

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    - --------------------------------------------------------------------------
    Debian Security Advisory DSA 534-1 security@debian.org
    http://www.debian.org/security/ Matt Zimmerman
    July 22nd, 2004 http://www.debian.org/security/faq
    - --------------------------------------------------------------------------

    Package : mailreader
    Vulnerability : directory traversal
    Problem-Type : remote
    Debian-specific: no
    CVE Ids : CAN-2002-1581

    A directory traversal vulnerability was discovered in mailreader
    whereby remote attackers could view arbitrary files with the
    privileges of the nph-mr.cgi process (by default, www-data) via
    relative paths and a null byte in the configLanguage parameter.

    For the current stable distribution (woody), this problem has been
    fixed in version 2.3.29-5woody1.

    For the unstable distribution (sid), this problem will be fixed soon.

    We recommend that you update your mailreader package.

    Upgrade Instructions
    - --------------------

    wget url
            will fetch the file for you
    dpkg -i file.deb
            will install the referenced file.

    If you are using the apt-get package manager, use the line for
    sources.list as given below:

    apt-get update
            will update the internal database
    apt-get upgrade
            will install corrected packages

    You may use an automated update by adding the resources from the
    footer to the proper configuration.

    Debian GNU/Linux 3.0 alias woody
    - --------------------------------

      Source archives:

        http://security.debian.org/pool/updates/main/m/mailreader/mailreader_2.3.29-5woody1.dsc
          Size/MD5 checksum: 623 40827025821290e7130571a78fd0b06d
        http://security.debian.org/pool/updates/main/m/mailreader/mailreader_2.3.29-5woody1.diff.gz
          Size/MD5 checksum: 39678 b172e5b8957ee2f6b44122e0d3c99e06
        http://security.debian.org/pool/updates/main/m/mailreader/mailreader_2.3.29.orig.tar.gz
          Size/MD5 checksum: 307934 8e2687227ac737f244994e19ca3ba575

      Architecture independent components:

        http://security.debian.org/pool/updates/main/m/mailreader/mailreader_2.3.29-5woody1_all.deb
          Size/MD5 checksum: 362912 d3708d9d7ecc4064797f12cbe7d8489e

      These files will probably be moved into the stable distribution on
      its next revision.

    - ---------------------------------------------------------------------------------
    For apt-get: deb http://security.debian.org/ stable/updates main
    For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
    Mailing list: debian-security-announce@lists.debian.org
    Package info: `apt-cache show <pkg>' and http://packages.debian.org/>
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.2.4 (GNU/Linux)

    iD8DBQFBAIvOArxCt0PiXR4RAqDwAKCB50r82Lo+qViykid4ltYvAgQwegCgrZ+i
    r6C1oBVSI+hEwVEytCvO70A=
    =PUix
    -----END PGP SIGNATURE-----

  • Next message: Rob Rosenberger: "mi2g attacks "so-called" security sites"

    Relevant Pages