Ubuntu 845-1: Pan vulnerability

    Date08 Oct 2009
    CategoryUbuntu
    117
    Posted ByLinuxSecurity Advisories
    Pavel Polischouk discovered that Pan incorrectly handled certain data structures. If a user were tricked into viewing malicious nntp data, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. [More...]
    ===========================================================
    Ubuntu Security Notice USN-845-1           October 08, 2009
    pan vulnerability
    CVE-2008-2363
    ===========================================================
    
    A security issue affects the following Ubuntu releases:
    
    Ubuntu 8.04 LTS
    
    This advisory also applies to the corresponding versions of
    Kubuntu, Edubuntu, and Xubuntu.
    
    The problem can be corrected by upgrading your system to the
    following package versions:
    
    Ubuntu 8.04 LTS:
      pan                             0.132-2ubuntu2.1
    
    In general, a standard system upgrade is sufficient to effect the
    necessary changes.
    
    Details follow:
    
    Pavel Polischouk discovered that Pan incorrectly handled certain data
    structures. If a user were tricked into viewing malicious nntp data, a
    remote attacker could cause a denial of service or possibly execute
    arbitrary code with the privileges of the user invoking the program.
    
    
    Updated packages for Ubuntu 8.04 LTS:
    
      Source archives:
    
        http://security.ubuntu.com/ubuntu/pool/main/p/pan/pan_0.132-2ubuntu2.1.diff.gz
          Size/MD5:    20545 6d36e3b972652c124c93eff41dc5695b
        http://security.ubuntu.com/ubuntu/pool/main/p/pan/pan_0.132-2ubuntu2.1.dsc
          Size/MD5:      877 593b70e1321f89cc1d3d79aaa0fcd431
        http://security.ubuntu.com/ubuntu/pool/main/p/pan/pan_0.132.orig.tar.gz
          Size/MD5:  2069718 0999ea52f8d4187ac7c8fd416067b0e7
    
      amd64 architecture (Athlon64, Opteron, EM64T Xeon):
    
        http://security.ubuntu.com/ubuntu/pool/main/p/pan/pan_0.132-2ubuntu2.1_amd64.deb
          Size/MD5:   821136 10e791382ac078f206571407b9aca5b8
    
      i386 architecture (x86 compatible Intel/AMD):
    
        http://security.ubuntu.com/ubuntu/pool/main/p/pan/pan_0.132-2ubuntu2.1_i386.deb
          Size/MD5:   792564 5f4a69d8ce3dc342e20893020d1b2b2f
    
      lpia architecture (Low Power Intel Architecture):
    
        http://ports.ubuntu.com/pool/main/p/pan/pan_0.132-2ubuntu2.1_lpia.deb
          Size/MD5:   815322 dff1b50f04af376b9476f5f9150b0b97
    
      powerpc architecture (Apple Macintosh G3/G4/G5):
    
        http://ports.ubuntu.com/pool/main/p/pan/pan_0.132-2ubuntu2.1_powerpc.deb
          Size/MD5:   864758 9c63e15bd64326b9483ba916c089a00d
    
      sparc architecture (Sun SPARC/UltraSPARC):
    
        http://ports.ubuntu.com/pool/main/p/pan/pan_0.132-2ubuntu2.1_sparc.deb
          Size/MD5:   885412 f0311151ff6ab621f97bbd6909253173
    
    
    
    
    You are not authorised to post comments.

    Comments powered by CComment

    LinuxSecurity Poll

    What do you think of the articles on LinuxSecurity?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 3 answer(s).
    /main-polls/24-what-do-you-think-of-the-quality-of-the-articles-on-linuxsecurity?task=poll.vote&format=json
    24
    radio
    [{"id":"87","title":"Excellent, don't change a thing!","votes":"25","type":"x","order":"1","pct":55.56,"resources":[]},{"id":"88","title":"Should be more technical","votes":"5","type":"x","order":"2","pct":11.11,"resources":[]},{"id":"89","title":"Should include more HOWTOs","votes":"15","type":"x","order":"3","pct":33.33,"resources":[]}]["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"]["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"]350
    bottom200

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.