S-222: Evolution Security Update


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-222: Evolution Security Update
# 1  
Old 03-06-2008
S-222: Evolution Security Update

A format string flaw was found in the way Evolution displayed encrypted mail content. The risk is MEDIUM. If a user opened a carefully crafted mail message, arbitrary code could be executed as the user running Evolution.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
mhmail(1)						      General Commands Manual							 mhmail(1)

NAME
mhmail - send or read mail (only available within the message handling system, mh) SYNOPSIS
mhmail [addrs...] [options] OPTIONS
Specifies the text of the message. If it is specified, then the standard input is not read. Specifies addresses to be placed in the cc: field of the message. Specifies the content of the From: header of the draft. The address given is placed in the From: field of the mes- sage. The Sender: field is filled in correctly by post. Prints a list of the valid options for this command. Specifies the mail system over which mail is sent. The only value allowed is smtp, which is the standard mail system. Additional values are supported only for use with other mail systems. Provides the text of the Subject: field of the message. DESCRIPTION
The mhmail program is intended as a replacement for the standard mail programs, bellmail and ucbmail. See binmail(1) and mail(1) for more details of these mail programs. When invoked without arguments, it simply invokes inc to incorporate new messages from the user's maildrop. When one or more users is specified, a message is read from the standard input and spooled to a temporary file. The mhmail program then invokes post with the name of the temporary file as its argument to deliver the message to the specified user. Normally, people will use comp and send to send messages. RESTRICTIONS
Messages with a null body part will not be sent by mhmail. You must include some body text in all messages to be sent by mhmail. For this version, the -mts option only supports the value smtp. Additional values are supported for use only with other mail systems. FILES
Program to incorporate a maildrop into a folder. Program to deliver a message. Temporary copy of message. SEE ALSO
inc(1), post(8) mhmail(1)