-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ----------------------------------------------------------------------------
Debian Security Advisory                                 security@debian.org 
Debian -- Security Information                                Martin Schulze
August 5, 2000
- ----------------------------------------------------------------------------

Package: mailman
Vulnerability: local mailman group exploit
Debian-specific: no

Former versions of mailman v2.0 came with a security problem,
introduced during the 2.0 beta cycle, that could be exploited by
clever local users to gain group mailman permission.  No exploit does
exist at the moment, though.

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.


Debian GNU/Linux 2.1 alias slink
- --------------------------------

  Slink comes with version 1.0 that is not vulnerable.

Debian 2.2 alias potato
- -----------------------

  Potato comes with version 1.1 that is not vulnerable.

Debian Unstable alias woody
- ---------------------------

  This version of Debian is not yet released and reflects the current
  development release.  Fixes are currently available for Intel ia32
  and Motorola 680x0.  Fixes for other architectures will be available
  soon.  In doubt, please recompile the package from source on your
  own.

  Source archives:

      
      MD5 checksum: 177e666144c35d6b945b30dddf567fef
      
      MD5 checksum: 431d66e4ef496ce48463ed55193d375c
      
      MD5 checksum: 2c2602b7745a56adecd4f24fdd6d446f

  Intel ia32 architecture:

      
      MD5 checksum: e2a071bf4a9a3be02978df47ed58acb6

  Motorola 680x0 architecture:

      
      MD5 checksum: 8bb6367c1e249beaaaa8eb3b7fc71c27

- ----------------------------------------------------------------------------
For apt-get: deb  Debian -- Security Information  stable updates
For dpkg-ftp:    dists/stable/updates
Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.1 (GNU/Linux)
Comment: For info see  The GNU Privacy Guard

iD8DBQE5jVi0W5ql+IAeqTIRAntHAJ4qPqO9uLQirRFsl48T5Uv729A6/QCfUAiJ
k+20YJsL9L3+SBCkm2KOxic=7iAZ
-----END PGP SIGNATURE-----

Debian: mailman vulnerability

August 6, 2000
Exploit exists that could result in a malicious user obtaining group mailman permission.

Summary

Package: mailman
Vulnerability: local mailman group exploit
Debian-specific: no

Former versions of mailman v2.0 came with a security problem,
introduced during the 2.0 beta cycle, that could be exploited by
clever local users to gain group mailman permission. No exploit does
exist at the moment, though.

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.


Debian GNU/Linux 2.1 alias slink

Slink comes with version 1.0 that is not vulnerable.

Debian 2.2 alias potato
- -----------------------

Potato comes with version 1.1 that is not vulnerable.

Debian Unstable alias woody

This version of Debian is not yet released and reflects the current
development release. Fixes are currently available for Intel ia32
and Motorola 680x0. Fixes for other architectures will be available
soon. In doubt, please recompile the package from source on your
own.

Source archives:


MD5 checksum: 177e666144c35d6b945b30dddf567fef

MD5 checksum: 431d66e4ef496ce48463ed55193d375c

MD5 checksum: 2c2602b7745a56adecd4f24fdd6d446f

Intel ia32 architecture:


MD5 checksum: e2a071bf4a9a3be02978df47ed58acb6

Motorola 680x0 architecture:


MD5 checksum: 8bb6367c1e249beaaaa8eb3b7fc71c27

For apt-get: deb Debian -- Security Information stable updates
For dpkg-ftp: dists/stable/updates
Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.1 (GNU/Linux)
Comment: For info see The GNU Privacy Guard

iD8DBQE5jVi0W5ql+IAeqTIRAntHAJ4qPqO9uLQirRFsl48T5Uv729A6/QCfUAiJ
k+20YJsL9L3+SBCkm2KOxic=7iAZ
-----END PGP SIGNATURE-----


Severity

Related News

4.Lock AbstractDigital Esm H320
2 - 3 min read
Tails 6.2 is a new Linux distribution release that expands its multilingual support and improves security features. The distribution is a
19.Laptop Bed Esm H320
2 - 3 min read
AlmaLinux 9.4 beta has been released and provides compelling reasons to consider it for desktop usage. While AlmaLinux is primarily known as a
32.Lock Code Circular Esm H320
2 - 3 min read
Linux admins and security practitioners face significant challenges in keeping their Linux systems secure amidst the constant threat of kernel bugs.
1.Penguin Landscape Esm H320
2 - 3 min read
A significant security threat, known as the Spectre v2 exploit, has been observed targeting Linux systems running on modern Intel processors. Let's
10.FingerPrint Locks Esm H320
2 - 3 min read
The recent release of I2P 2.5.0 , an anonymous P2P network that protects against online censorship, surveillance, and monitoring, has brought a slew
24.Key Code Esm H320
2 - 3 min read
The Akira ransomware group has extorted approximately $42 million from over 250 victims since January 1, 2024. The group initially focused on
5.ShakingHands Esm H320
2 - 3 min read
At The Linux Foundation's Open Source Summit North America , Linus Torvalds, the creator of Linux, discussed various topics related to Linux
30.Lock Globe Motherboard Esm H320
1 - 2 min read
The SPDX 3.0 release marks a significant milestone in software management, particularly for Linux admins, infosec professionals, internet security
Sign Up