Debian: mailx local exploit

    Date09 Aug 2000
    CategoryDebian
    2798
    Posted ByLinuxSecurity Advisories
    mailx as distributed in Debian GNU/Linux 2.1 has some features thatmade it possible to execute system commands if a user can trick aprivileged program to send email using /usr/bin/mail.
    -----BEGIN PGP SIGNED MESSAGE-----
    
    - ------------------------------------------------------------------------
    Debian Security Advisory                             This email address is being protected from spambots. You need JavaScript enabled to view it. 
    http://www.debian.org/security/                         Wichert Akkerman
    August  8, 2000
    - ------------------------------------------------------------------------
    
    
    Package        : mailx
    Problem type   : local exploit
    Debian-specific: no
    
    mailx is a often used by other programs to send email. Unfortunately
    mailx as distributed in Debian GNU/Linux 2.1 has some features that
    made it possible to execute system commands if a user can trick a
    privileged program to send email using /usr/bin/mail. 
    
    This has been fixed in version 8.1.1-10.1.1slink.2 by no longer
    allowing all configuration options to be set using the environment.
    
    We recommend you upgrade your mailx package immediately.
    
    wget url
            will fetch the file for you
    dpkg -i file.deb
            will install the referenced file.
    
    Debian GNU/Linux 2.1 alias slink
    - --------------------------------
    
      This version of Debian was released only for Intel, the Motorola
      680x0, the alpha and the Sun sparc architecture.
    
      Source archives:
         http://security.debian.org/dists/stable/updates/source/mailx_8.1.1-10.1.1slink.2.diff.gz
          MD5 checksum: edcd9210ef001cfde91252abd3547ab1
         http://security.debian.org/dists/stable/updates/source/mailx_8.1.1-10.1.1slink.2.dsc
          MD5 checksum: 508850b252b8f4797cfc38ce3e63ac57
         http://security.debian.org/dists/stable/updates/source/mailx_8.1.1.orig.tar.gz
          MD5 checksum: c779002cb043b57fd5198ec2032cacb0
    
      Alpha architecture:
         http://security.debian.org/dists/stable/updates/binary-alpha/mailx_8.1.1-10.1.1slink.2_alpha.deb
          MD5 checksum: 8a218e08fd337c260504ffce82954426
    
      Intel ia32 architecture:
         http://security.debian.org/dists/stable/updates/binary-i386/mailx_8.1.1-10.1.1slink.2_i386.deb
          MD5 checksum: 1eb602833806b8a7a3d30a2515eadf72
    
      Motorola 680x0 architecture:
         http://security.debian.org/dists/stable/updates/binary-m68k/mailx_8.1.1-10.1.1slink.2_m68k.deb
          MD5 checksum: b31f0ec28bd6a42108f1bb51e6795fed
    
      Sun Sparc architecture:
         http://security.debian.org/dists/stable/updates/binary-sparc/mailx_8.1.1-10.1.1slink.2_sparc.deb
          MD5 checksum: e6f6f193c85b45f9220fa9819326d6ac
    
      These files will be moved into
       ftp://ftp.debian.org/debian/dists/stable/*/binary-$arch/ soon.
    
    
    Debian GNU/Linux 2.2 alias potato
    - ---------------------------------
    
      Please note that woody has not been released yet. However since potato
      is very close to being release security updates are already being made
      available on security.debian.org. 
    
      Potato will be release for alpha, arm, i386, m68k, powerpc and sparc.
      However at this moment fixes are not available for all architectures.
      Packages for architectures not mentioned here will be available
      shortly on security.debian.org .
    
      Source archives:
         http://security.debian.org/dists/potato/updates/main/source/mailx_8.1.1-10.1.3.diff.gz
          MD5 checksum: 95f3a7a1305c6c276471d02f33d0c837
         http://security.debian.org/dists/potato/updates/main/source/mailx_8.1.1-10.1.3.dsc
          MD5 checksum: fea46d4eb874052ff4b440fac3c0c976
         http://security.debian.org/dists/potato/updates/main/source/mailx_8.1.1.orig.tar.gz
          MD5 checksum: c779002cb043b57fd5198ec2032cacb0
    
      Alpha architecture:
         http://security.debian.org/dists/potato/updates/main/binary-alpha/mailx_8.1.1-10.1.3_alpha.deb
          MD5 checksum: d85e6f8ca7822c36d2947cc5f07c9d59
    
      ARM architecture:
         http://security.debian.org/dists/potato/updates/main/binary-arm/mailx_8.1.1-10.1.3_arm.deb
          MD5 checksum: 37bd5565a76a96391ca6cf3c2116d74b
    
      Intel ia32 architecture:
         http://security.debian.org/dists/potato/updates/main/binary-i386/mailx_8.1.1-10.1.3_i386.deb
          MD5 checksum: fefd4a769160b8a1ed25df4d62dc4a2b
    
      PowerPC architecture:
         http://security.debian.org/dists/potato/updates/main/binary-powerpc/mailx_8.1.1-10.1.3_powerpc.deb
          MD5 checksum: 990e9168c99dc1661011577c203a8d53
    
      Sun Sparc architecture:
         http://security.debian.org/dists/potato/updates/main/binary-sparc/mailx_8.1.1-10.1.3_sparc.deb
          MD5 checksum: 9ccb4cc89c5d9ec6e912034ff1584b90
    
    For not yet released architectures please refer to the appropriate
    directory  ftp://ftp.debian.org/debian/dists/sid/binary-$arch/ .
    
    - -- 
    - ----------------------------------------------------------------------------
    For apt-get: deb  http://security.debian.org/ stable updates
    For dpkg-ftp:  ftp://security.debian.org/debian-security dists/stable/updates
    Mailing list: debian-security-This email address is being protected from spambots. You need JavaScript enabled to view it.
    
    -----BEGIN PGP SIGNATURE-----
    Version: 2.6.3ia
    Charset: noconv
    
    iQB1AwUBOZD16ajZR/ntlUftAQEZawL/et1fP+gJeK00Thjk+j8EfjwMD0nHXlEY
    dEJKvFPhLSFXjzNR6ikhTi4vp81mhzJ9r14lzlRtaFS5O3t7R/BDN7QHqoIec+hh
    gMeAuuPd1HJ+7diSZmyOeahbkG9oiRXJ
    =/5IH
    -----END PGP SIGNATURE-----
    
    You are not authorised to post comments.

    Comments powered by CComment

    LinuxSecurity Poll

    What do you think of the articles on LinuxSecurity?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 3 answer(s).
    /main-polls/24-what-do-you-think-of-the-quality-of-the-articles-on-linuxsecurity?task=poll.vote&format=json
    24
    radio
    [{"id":"87","title":"Excellent, don't change a thing!","votes":"7","type":"x","order":"1","pct":58.33,"resources":[]},{"id":"88","title":"Should be more technical","votes":"3","type":"x","order":"2","pct":25,"resources":[]},{"id":"89","title":"Should include more HOWTOs","votes":"2","type":"x","order":"3","pct":16.67,"resources":[]}]["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"]["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"]350
    bottom200

    Advisories

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.