Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 554
Alerts This Week
Warning Icon 1 554

Red Hat 6.0: RHSA-2000:006-01 Moderate: nmh Shell Code Execution Risk

red hat
Calendar Grey March 7, 2000
Dist Redhat Esm H88
Debian has released a security notice concerning smtp packages related to a flaw in email protocol handling that may enable remote system control. Users are strongly encouraged to update.
By creating specially formed MIME headers, it was possibleto have nmh's 'mhshow' utility execute arbitrary shell code.

Solution

For each RPM for your particular architecture, run:

rpm -Fvh [filename]

where filename is the name of the RPM.

5. Bug IDs fixed ( for more info):

9921 - security bug in nmh


6. Obsoleted by:

N/A

7. Conflicts with:

N/A

8. RPMs required:


Red Hat Linux 5.2:

intel:

alpha:

sparc:

sources:

Red Hat Linux 6.0:

intel:

alpha:

sparc:

sources:

Red Hat Linux 6.1:

intel:

alpha:

sparc:

sources:


9. Verification:

MD5 sum Package Name 158d9ce6bcbc130fdcc069218440c14e 6.0/alpha/nmh-1.0.3-6x.alpha.rpm 34ff509708a6878e9b58b5ed98cb27df 5.2/alpha/nmh-1.0.3-5x.alpha.rpm 158d9ce6bcbc130fdcc069218440c14e 6.1/alpha/nmh-1.0.3-6x.alpha.rpm 829927f436bab62a4a6b3e9ba0b8ab36 6.0/SRPMS/nmh-1.0.3-6x.src.rpm 383e55c58bea25d6fa73216e86fc27ba 5.2/SRPMS/nmh-1.0.3-5x.src.rpm 829927f436bab62a4a6b3e9ba0b8ab36 6.1/SRPMS/nmh-1.0.3-6x.src.rpm ca6a19156b88516362e9404b8ac8fd06 5.2/sparc/nmh-1.0.3-5x.sparc.rpm 59a31706a3747717e6aaec9c5f1b3122 6.0/sparc/nmh-1.0.3-6x.sparc.rpm 59a31706a3747717e6aaec9c5f1b3122 6.1/sparc/nmh-1.0.3-6x.sparc.rpm 5633c3097e0f6503615957778d572b52 5.2/i386/nmh-1.0.3-5x.i386.rpm 272c5a8bbdd1c6b7ed60595cf4521d01 6.0/i386/nmh-1.0.3-6x.i386.rpm 272c5a8bbdd1c6b7ed60595cf4521d01 6.1/i386/nmh-1.0.3-6x.i386.rpm


These packages are GPG signed by Red Hat, Inc. for security. Our key is available at:

You can verify each package with the following command: rpm --checksig

If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command: rpm --checksig --nogpg

Summary

References

N/A `

Package List


Advisory ID: RHSA-2000:006-01
Issue date: 2000-03-06
Updated on: 2000-03-06
Product: Red Hat Linux
Keywords: nmh mime mhshow
Cross references: N/A

Topic

Relevant Releases Architectures

Red Hat Linux 5.2 - i386 alpha sparc

Red Hat Linux 6.0 - i386 alpha sparc

Red Hat Linux 6.1 - i386 alpha sparc

Bugs Fixed

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.