Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 433
Alerts This Week
Warning Icon 1 433

Ubuntu 14.10 USN-2558-1 Moderate Security: Mailman Path Vulnerability

ubuntu
Calendar Grey April 7, 2015
Dist Ubuntu Esm H88
A flaw in Mailman for Ubuntu could enable harmful program execution through crafted list titles. Ensure your Mailman is updated immediately.
Mailman could be made to run programs if it processed a specially crafted list name.

Summary

Mailman could be made to run programs if it processed a specially crafted

list name.

Software Description:

- mailman: Powerful, web-based mailing list manager

Details:

It was discovered that Mailman incorrectly handled special characters

in list names. A local attacker could use this issue to perform a path

traversal attack and execute arbitrary code as the Mailman user.

Topics%20covered

Topics Covered

security advisory Ubuntu moderate severity mailman program execution path traversal

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.10:
  mailman                         1:2.1.18-1ubuntu0.1

Ubuntu 14.04 LTS:
  mailman                         1:2.1.16-2ubuntu0.1

Ubuntu 12.04 LTS:
  mailman                         1:2.1.14-3ubuntu0.2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2558-1

CVE-2015-2775

Severity
important
Lowest
Low
Medium
High
Critical

April 07, 2015

Topics%20covered

Topics Covered

security advisory Ubuntu moderate severity mailman program execution path traversal

Package Information

https://launchpad.net/ubuntu/+source/mailman/1:2.1.18-1ubuntu0.1
https://launchpad.net/ubuntu/+source/mailman/1:2.1.16-2ubuntu0.1
https://launchpad.net/ubuntu/+source/mailman/1:2.1.14-3ubuntu0.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.