Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 439
Alerts This Week
Warning Icon 1 439

Debian: DSA 1315-1 Critical: Libphp-Phpmailer Remote Command Execution

debian
Calendar Grey June 29, 2007
Scroller Debian
The update for Libphp-phpmailer addresses command execution vulnerabilities; prioritize your Debian security enhancements and manage potential weaknesses.
Thor Larholm discovered that libphp-phpmailer, an email transfer class for PHP, performs insufficient input validition if configured to use Sendmail
Topics%20covered

Topics Covered

security advisory debian command execution remote threat input validation libphp-phpmailer

Summary


For the stable distribution (etch) this problem has been fixed in
version 1.73-2etch1.

For the unstable distribution (sid) this problem has been fixed in
version 1.73-4.

We recommend that you upgrade your libphp-phpmailer package.


Upgrade Instructions
- --------------------wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 4.0 alias etch

Size/MD5 checksum: 657 90c98199f785cc36e195da8c68f59dc4
Size/MD5 checksum: 2478 67871680e53fe86e23987c3d8818dbdb
Size/MD5 checksum: 68644 3a6ce5ff38090d6ca4881e31da00f623

Architecture independent components:

Size/M...

Read the Full Advisory

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory debian command execution remote threat input validation libphp-phpmailer

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.