Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 503
Alerts This Week
Warning Icon 1 503

Ubuntu 19.04 LTS: 4160-1 Critical: UW IMAP Remote Command Execution

ubuntu
Calendar Grey October 21, 2019
Dist Ubuntu Esm H88
A vulnerability has been identified in Ubuntu releases that permits UW IMAP to run commands through specially crafted inputs. Immediate update advised!
UW IMAP could be made to execute programs if it received specially crafted input.

Summary

UW IMAP could be made to execute programs if it received specially crafted

input.

Software Description:

- uw-imap: c-client library for mail protocols - library files

Details:

It was discovered that UW IMAP incorrectly handled inputs. A remote attacker

could possibly use this issue to execute arbitrary OS commands.

Topics%20covered

Topics Covered

security advisory Ubuntu remote command execution uw-imap input handling

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
  libc-client2007e                8:2007f~dfsg-5ubuntu0.19.04.2
  mlock                           8:2007f~dfsg-5ubuntu0.19.04.2
  uw-mailutils                    8:2007f~dfsg-5ubuntu0.19.04.2

Ubuntu 18.04 LTS:
  libc-client2007e                8:2007f~dfsg-5ubuntu0.18.04.2
  mlock                           8:2007f~dfsg-5ubuntu0.18.04.2
  uw-mailutils                    8:2007f~dfsg-5ubuntu0.18.04.2

Ubuntu 16.04 LTS:
  libc-client2007e                8:2007f~dfsg-4+deb8u1build0.16.04.1
  mlock                           8:2007f~dfsg-4+deb8u1build0.16.04.1
  uw-mailutils                    8:2007f~dfsg-4+deb8u1build0.16.04.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4160-1

CVE-2018-19518

Severity
critical
Lowest
Low
Medium
High
Critical

October 21, 2019

Topics%20covered

Topics Covered

security advisory Ubuntu remote command execution uw-imap input handling

Package Information

https://launchpad.net/ubuntu/+source/uw-imap/8:2007f~dfsg-5ubuntu0.19.04.2
https://launchpad.net/ubuntu/+source/uw-imap/8:2007f~dfsg-5ubuntu0.18.04.2
https://launchpad.net/ubuntu/+source/uw-imap/8:2007f~dfsg-4+deb8u1build0.16.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.