Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -4 articles for you...
87
security advisorycriticaldebianDebian DSA-4825-1: Critical Dovecot Update on Email Server Security
Several vulnerabilities have been discovered in the Dovecot email server. CVE-2020-24386 . - ------------------------------------------------------------------------- Debian Security Advisory DSA-4825-1
Jan 04, 2021
•Critical
Debian
98
security advisoryRed Hatbuffer overflowRed Hat: RHSA-2014:1172-01 Important: Procmail Buffer Overflow
Updated procmail packages that fix one security issue are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Important: procmail security update Advisory ID: RHSA-2014:1172-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2014:1172.html Issue date: 2014-09-10 CVE Names: CVE-2014-3618 ==================================================================== 1. Summary: Updated procmail packages that fix one security issue are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server (v. 7) - ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 3. Description: The procmail program is used for local mail delivery. In addition to just delivering mail, procmail can be used for automatic filtering, presorting, and other mail handling jobs. A heap-based buffer overflow flaw was found in procmail's formail utility. A remote attacker could send an email with specially craftedheaders that, when processed by formail, could cause procmail to crash or, possibly, execute arbitrary code as the user running formail. (CVE-2014-3618) All procmail users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1137581 - CVE-2014-3618 procmail: Heap-overflow in procmail's formail utility when processing specially-crafted email headers 6. Package List: Red Hat Enterprise Linux Desktop (v. 5 client): Source: procmail-3.22-17.1.2.src.rpm i386: procmail-3.22-17.1.2.i386.rpm procmail-debuginfo-3.22-17.1.2.i386.rpm x86_64: procmail-3.22-17.1.2.x86_64.rpm procmail-debuginfo-3.22-17.1.2.x86_64.rpm Red Hat Enterprise Linux (v. 5 server): Source: procmail-3.22-17.1.2.src.rpm i386: procmail-3.22-17.1.2.i386.rpm procmail-debuginfo-3.22-17.1.2.i386.rpm ia64: procmail-3.22-17.1.2.ia64.rpm procmail-debuginfo-3.22-17.1.2.ia64.rpm ppc: procmail-3.22-17.1.2.ppc.rpm procmail-debuginfo-3.22-17.1.2.ppc.rpm s390x: procmail-3.22-17.1.2.s390x.rpm procmail-debuginfo-3.22-17.1.2.s390x.rpm x86_64: procmail-3.22-17.1.2.x86_64.rpm procmail-debuginfo-3.22-17.1.2.x86_64.rpm Red Hat Enterprise Linux Desktop (v. 6): Source: procmail-3.22-25.1.el6_5.1.src.rpm i386: procmail-3.22-25.1.el6_5.1.i686.rpm procmail-debuginfo-3.22-25.1.el6_5.1.i686.rpm x86_64: procmail-3.22-25.1.el6_5.1.x86_64.rpm procmail-debuginfo-3.22-25.1.el6_5.1.x86_64.rpm Red Hat Enterprise Linux HPC Node (v. 6): Source: procmail-3.22-25.1.el6_5.1.src.rpm x86_64: procmail-3.22-25.1.el6_5.1.x86_64.rpm procmail-debuginfo-3.22-25.1.el6_5.1.x86_64.rpm Red Hat Enterprise Linux Server (v.6): Source: procmail-3.22-25.1.el6_5.1.src.rpm i386: procmail-3.22-25.1.el6_5.1.i686.rpm procmail-debuginfo-3.22-25.1.el6_5.1.i686.rpm ppc64: procmail-3.22-25.1.el6_5.1.ppc64.rpm procmail-debuginfo-3.22-25.1.el6_5.1.ppc64.rpm s390x: procmail-3.22-25.1.el6_5.1.s390x.rpm procmail-debuginfo-3.22-25.1.el6_5.1.s390x.rpm x86_64: procmail-3.22-25.1.el6_5.1.x86_64.rpm procmail-debuginfo-3.22-25.1.el6_5.1.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 6): Source: procmail-3.22-25.1.el6_5.1.src.rpm i386: procmail-3.22-25.1.el6_5.1.i686.rpm procmail-debuginfo-3.22-25.1.el6_5.1.i686.rpm x86_64: procmail-3.22-25.1.el6_5.1.x86_64.rpm procmail-debuginfo-3.22-25.1.el6_5.1.x86_64.rpm Red Hat Enterprise Linux Client Optional (v. 7): Source: procmail-3.22-34.el7_0.1.src.rpm x86_64: procmail-3.22-34.el7_0.1.x86_64.rpm procmail-debuginfo-3.22-34.el7_0.1.x86_64.rpm Red Hat Enterprise Linux Server (v. 7): Source: procmail-3.22-34.el7_0.1.src.rpm ppc64: procmail-3.22-34.el7_0.1.ppc64.rpm procmail-debuginfo-3.22-34.el7_0.1.ppc64.rpm s390x: procmail-3.22-34.el7_0.1.s390x.rpm procmail-debuginfo-3.22-34.el7_0.1.s390x.rpm x86_64: procmail-3.22-34.el7_0.1.x86_64.rpm procmail-debuginfo-3.22-34.el7_0.1.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: procmail-3.22-34.el7_0.1.src.rpm x86_64: procmail-3.22-34.el7_0.1.x86_64.rpm procmail-debuginfo-3.22-34.el7_0.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7. References: https://access.redhat.com/security/cve/CVE-2014-3618 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2014 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFUEFTUXlSAg2UNWIIRApZ7AJ4gyPJLSYIQ25mGiFupoO+ZuEQoTwCeODPT E6CP94zetI6yOKM9JomSLwY=pIAe -----END PGPSIGNATURE----- -- Enterprise-watch-list mailing list
Sep 10, 2014
•Important
Red Hat
98
security advisoryred hatremote attackRed Hat: 2014:1172-01 Critical: Procmail Heap Overflow Risk Alert
Updated procmail packages that fix one security issue are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Important: procmail security update Advisory ID: RHSA-2014:1172-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2014:1172.html Issue date: 2014-09-10 CVE Names: CVE-2014-3618 ==================================================================== 1. Summary: Updated procmail packages that fix one security issue are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server (v. 7) - ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 3. Description: The procmail program is used for local mail delivery. In addition to just delivering mail, procmail can be used for automatic filtering, presorting, and other mail handling jobs. A heap-based buffer overflow flaw was found in procmail's formail utility. A remote attacker could send an email with specially crafted headers that, when processed by formail, could cause procmail to crash or, possibly, execute arbitrary code asthe user running formail. (CVE-2014-3618) All procmail users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1137581 - CVE-2014-3618 procmail: Heap-overflow in procmail's formail utility when processing specially-crafted email headers 6. Package List: Red Hat Enterprise Linux Desktop (v. 5 client): Source: procmail-3.22-17.1.2.src.rpm i386: procmail-3.22-17.1.2.i386.rpm procmail-debuginfo-3.22-17.1.2.i386.rpm x86_64: procmail-3.22-17.1.2.x86_64.rpm procmail-debuginfo-3.22-17.1.2.x86_64.rpm Red Hat Enterprise Linux (v. 5 server): Source: procmail-3.22-17.1.2.src.rpm i386: procmail-3.22-17.1.2.i386.rpm procmail-debuginfo-3.22-17.1.2.i386.rpm ia64: procmail-3.22-17.1.2.ia64.rpm procmail-debuginfo-3.22-17.1.2.ia64.rpm ppc: procmail-3.22-17.1.2.ppc.rpm procmail-debuginfo-3.22-17.1.2.ppc.rpm s390x: procmail-3.22-17.1.2.s390x.rpm procmail-debuginfo-3.22-17.1.2.s390x.rpm x86_64: procmail-3.22-17.1.2.x86_64.rpm procmail-debuginfo-3.22-17.1.2.x86_64.rpm Red Hat Enterprise Linux Desktop (v. 6): Source: procmail-3.22-25.1.el6_5.1.src.rpm i386: procmail-3.22-25.1.el6_5.1.i686.rpm procmail-debuginfo-3.22-25.1.el6_5.1.i686.rpm x86_64: procmail-3.22-25.1.el6_5.1.x86_64.rpm procmail-debuginfo-3.22-25.1.el6_5.1.x86_64.rpm Red Hat Enterprise Linux HPC Node (v. 6): Source: procmail-3.22-25.1.el6_5.1.src.rpm x86_64: procmail-3.22-25.1.el6_5.1.x86_64.rpm procmail-debuginfo-3.22-25.1.el6_5.1.x86_64.rpm Red Hat Enterprise Linux Server (v.6): Source: procmail-3.22-25.1.el6_5.1.src.rpm i386: procmail-3.22-25.1.el6_5.1.i686.rpm procmail-debuginfo-3.22-25.1.el6_5.1.i686.rpm ppc64: procmail-3.22-25.1.el6_5.1.ppc64.rpm procmail-debuginfo-3.22-25.1.el6_5.1.ppc64.rpm s390x: procmail-3.22-25.1.el6_5.1.s390x.rpm procmail-debuginfo-3.22-25.1.el6_5.1.s390x.rpm x86_64: procmail-3.22-25.1.el6_5.1.x86_64.rpm procmail-debuginfo-3.22-25.1.el6_5.1.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 6): Source: procmail-3.22-25.1.el6_5.1.src.rpm i386: procmail-3.22-25.1.el6_5.1.i686.rpm procmail-debuginfo-3.22-25.1.el6_5.1.i686.rpm x86_64: procmail-3.22-25.1.el6_5.1.x86_64.rpm procmail-debuginfo-3.22-25.1.el6_5.1.x86_64.rpm Red Hat Enterprise Linux Client Optional (v. 7): Source: procmail-3.22-34.el7_0.1.src.rpm x86_64: procmail-3.22-34.el7_0.1.x86_64.rpm procmail-debuginfo-3.22-34.el7_0.1.x86_64.rpm Red Hat Enterprise Linux Server (v. 7): Source: procmail-3.22-34.el7_0.1.src.rpm ppc64: procmail-3.22-34.el7_0.1.ppc64.rpm procmail-debuginfo-3.22-34.el7_0.1.ppc64.rpm s390x: procmail-3.22-34.el7_0.1.s390x.rpm procmail-debuginfo-3.22-34.el7_0.1.s390x.rpm x86_64: procmail-3.22-34.el7_0.1.x86_64.rpm procmail-debuginfo-3.22-34.el7_0.1.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: procmail-3.22-34.el7_0.1.src.rpm x86_64: procmail-3.22-34.el7_0.1.x86_64.rpm procmail-debuginfo-3.22-34.el7_0.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://access.redhat.com/security/cve/CVE-2014-3618 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2014 Red Hat, Inc. . Newly released procmail updates for Red Hat have been issued to rectify a significant security vulnerability deemed critical in its implications.. Procmail Update, Red HatEnterprise Linux, Security Fix. . Severity: Important. LinuxSecurity.com Team
Sep 10, 2014
•Important
Red Hat
200
security advisorybuffer overflowmoderate severityScientific Linux SL3.x: CVE-2008-5005 Moderate: imap Buffer Overflow
Moderate: imap security update. Date: Wed, 18 Feb 2009 14:23:56 -0600 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: FASTBUGS for SL 4.x i386/x86_64 Comments: To: "
Feb 19, 2009
Scientific Linux
91
security advisoryGentoohigh severityGentoo: GLSA 200808-12 High: Postfix Local Escalation Threat
Postfix incorrectly checks the ownership of a mailbox, allowing, in certain circumstances, to append data to arbitrary files on a local system with root privileges. [More...]. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200808-12 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: Postfix: Local privilege escalation vulnerability Date: August 14, 2008 Bugs: #232642 ID: 200808-12 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Postfix incorrectly checks the ownership of a mailbox, allowing, in certain circumstances, to append data to arbitrary files on a local system with root privileges. Background ========= Postfix is Wietse Venema's mailer that attempts to be fast, easy to administer, and secure, as an alternative to the widely-used Sendmail program. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 mail-mta/postfix < 2.5.3-r1 *> = 2.4.7-r1 > = 2.5.3-r1 Description ========== Sebastian Krahmer of SuSE has found that Postfix allows to deliver mail to root-owned symlinks in an insecure manner under certain conditions. Normally, Postfix does not deliver mail to symlinks, except to root-owned symlinks, for compatibility with the systems using symlinks in /dev like Solaris. Furthermore, some systems like Linux allow to hardlink a symlink, while the POSIX.1-2001 standard requires that the symlink is followed. Depending on the write permissions and the delivery agent being used, this canlead to an arbitrary local file overwriting vulnerability (CVE-2008-2936). Furthermore, the Postfix delivery agent does not properly verify the ownership of a mailbox before delivering mail (CVE-2008-2937). Impact ===== The combination of these features allows a local attacker to hardlink a root-owned symlink such that the newly created symlink would be root-owned and would point to a regular file (or another symlink) that would be written by the Postfix built-in local(8) or virtual(8) delivery agents, regardless the ownership of the final destination regular file. Depending on the write permissions of the spool mail directory, the delivery style, and the existence of a root mailbox, this could allow a local attacker to append a mail to an arbitrary file like /etc/passwd in order to gain root privileges. The default configuration of Gentoo Linux does not permit any kind of user privilege escalation. The second vulnerability (CVE-2008-2937) allows a local attacker, already having write permissions to the mail spool directory which is not the case on Gentoo by default, to create a previously nonexistent mailbox before Postfix creates it, allowing to read the mail of another user on the system. Workaround ========= The following conditions should be met in order to be vulnerable to local privilege escalation. * The mail delivery style is mailbox, with the Postfix built-in local(8) or virtual(8) delivery agents. * The mail spool directory (/var/spool/mail) is user-writeable. * The user can create hardlinks pointing to root-owned symlinks located in other directories. Consequently, each one of the following workarounds is efficient. * Verify that your /var/spool/mail directory is not writeable by a user. Normally on Gentoo, only the mail group has write access, and no end-user should be granted the mail group ownership. * Prevent the local users from being able to create hardlinks pointing outside of the /var/spool/mail directory, e.g. with a dedicated partition. * Use a non-builtin Postfixdelivery agent, like procmail or maildrop. * Use the maildir delivery style of Postfix ("home_mailbox=Maildir/" for example). Concerning the second vulnerability, check the write permissions of /var/spool/mail, or check that every Unix account already has a mailbox, by using Wietse Venema's Perl script available in the official advisory. Resolution ========= All Postfix users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =mail-mta/postfix-2.5.3-r1" References ========= [ 1 ] CVE-2008-2936 https://www.cve.org/CVERecord?id=CVE-2008-2936 [ 2 ] CVE-2008-2937 https://www.cve.org/CVERecord?id=CVE-2008-2937 [ 3 ] Official Advisory Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200808-12 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to
Aug 15, 2008
Gentoo
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!