Stay Secure with the Latest Linux Advisories

security advisoryRed Hatupdate

Red Hat 6.0: RHSA-2000:006-01 Moderate: nmh Shell Code Execution Risk

By creating specially formed MIME headers, it was possibleto have nmh's 'mhshow' utility execute arbitrary shell code.. ` --------------------------------------------------------------------- Red Hat, Inc. Security Advisory Synopsis: New nmh packages available Advisory ID: RHSA-2000:006-01 Issue date: 2000-03-06 Updated on: 2000-03-06 Product: Red Hat Linux Keywords: nmh mime mhshow Cross references: N/A --------------------------------------------------------------------- 1. Topic: New nmh packages are available to fix a security problem in mime header parsing. 2. Relevant releases/architectures: Red Hat Linux 5.2 - i386 alpha sparc Red Hat Linux 6.0 - i386 alpha sparc Red Hat Linux 6.1 - i386 alpha sparc 3. Problem description: By creating specially formed MIME headers, it was possible to have nmh's 'mhshow' utility execute arbitrary shell code. It is recommended that all users of nmh upgrade to the fixed packages. 4. Solution: For each RPM for your particular architecture, run: rpm -Fvh [filename] where filename is the name of the RPM. 5. Bug IDs fixed ( for more info): 9921 - security bug in nmh 6. Obsoleted by: N/A 7. Conflicts with: N/A 8. RPMs required: Red Hat Linux 5.2: intel: alpha: sparc: sources: Red Hat Linux 6.0: intel: alpha: sparc: sources: Red Hat Linux 6.1: intel: alpha: sparc: sources: 9. Verification: MD5 sum Package Name -------------------------------------------------------------------------- 158d9ce6bcbc130fdcc069218440c14e 6.0/alpha/nmh-1.0.3-6x.alpha.rpm 34ff509708a6878e9b58b5ed98cb27df 5.2/alpha/nmh-1.0.3-5x.alpha.rpm 158d9ce6bcbc130fdcc069218440c14e 6.1/alpha/nmh-1.0.3-6x.alpha.rpm 829927f436bab62a4a6b3e9ba0b8ab36 6.0/SRPMS/nmh-1.0.3-6x.src.rpm 383e55c58bea25d6fa73216e86fc27ba 5.2/SRPMS/nmh-1.0.3-5x.src.rpm 829927f436bab62a4a6b3e9ba0b8ab36 6.1/SRPMS/nmh-1.0.3-6x.src.rpm ca6a19156b88516362e9404b8ac8fd06 5.2/sparc/nmh-1.0.3-5x.sparc.rpm 59a31706a3747717e6aaec9c5f1b3122 6.0/sparc/nmh-1.0.3-6x.sparc.rpm 59a31706a3747717e6aaec9c5f1b3122 6.1/sparc/nmh-1.0.3-6x.sparc.rpm 5633c3097e0f6503615957778d572b52 5.2/i386/nmh-1.0.3-5x.i386.rpm 272c5a8bbdd1c6b7ed60595cf4521d01 6.0/i386/nmh-1.0.3-6x.i386.rpm 272c5a8bbdd1c6b7ed60595cf4521d01 6.1/i386/nmh-1.0.3-6x.i386.rpm These packages are GPG signed by Red Hat, Inc. for security. Our key is available at: You can verify each package with the following command: rpm --checksig If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command: rpm --checksig --nogpg 10. References: N/A `. Debian has released a security notice concerning smtp packages related to a flaw in email protocol handling that may enable remote system control. Users are strongly encouraged to update.. nmh Packages, Red Hat Linux, Security Fix, MIME Exploitation, Code Execution. . LinuxSecurity.com Team

Mar 07, 2000 Red Hat