|
|
|
google unix.com
|
|||||||
| Forums | Register | Forum Rules | Links | Albums | FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
| Security Advisories (RSS) UNIX and Linux Security Advisories Via RSS News |
More UNIX and Linux Forum Topics You Might Find Helpful
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Mandriva: Subject: [Security Announce] [ MDVSA-2009:117 ] ntp | iBot | Security Advisories (RSS) | 0 | 05-19-2009 01:15 PM |
| Mandriva: Subject: [Security Announce] [ MDVSA-2009:115 ] phpMyAdmin | iBot | Security Advisories (RSS) | 0 | 05-18-2009 01:15 PM |
| Mandriva: Subject: [Security Announce] [ MDVSA-2009:109 ] quagga | iBot | Security Advisories (RSS) | 0 | 05-11-2009 03:15 AM |
| Mandriva: Subject: [Security Announce] [ MDVSA-2009:003 ] python | iBot | Security Advisories (RSS) | 0 | 01-12-2009 06:40 PM |
| Mandriva: Subject: [Security Announce] [ MDVSA-2008:031 ] - | iBot | Security Advisories (RSS) | 0 | 02-01-2008 10:10 AM |
Powered by 
|
|
|
LinkBack | Thread Tools | Search this Thread | Rate Thread | Display Modes |
05-23-2009
|
|||||
|
|||||
|
Mandriva: Subject: [Security Announce] [ MDVSA-2009:122 ] squirrelmail
LinuxSecurity.com: A vulnerability has been identified and corrected in squirrelmail:The map_yp_alias function in functions/imap_general.php in SquirrelMailbefore 1.4.19 allows remote attackers to execute arbitrary commandsvia shell metacharacters in a username string that is used by theypmatch program. NOTE: this issue exists because of an incompletefix for CVE-2009-1579. (CVE-2009-1381)Basically this is a syncronization with the latest squirrelmail packagefound in Mandriva Cooker. The rpm changelog will reveal all the changes(rpm -q --changelog squirrelmail).The updated packages have been upgraded to the latest version ofsquirrelmail to prevent this.
More... |
| Bookmarks |
| Thread Tools | Search this Thread |
| Display Modes | Rate This Thread |
|
|
![Mandriva: Subject: [Security Announce] [ MDVSA-2009:122 ] squirrelmail](http://solaris.unix.com/iconimages/security-advisories-rss/mandriva-subject-security-announce-mdvsa-2009-122-squirrelmail_ltr.gif)
Threaded Mode
