Secunia Logo
Netsikker nu! 2008
 
Debian update for libmail-audit-perl
Secunia Advisory: SA18656
Release Date: 2006-01-31
Last Update: 2006-03-21
Popularity: 7,370 views

Critical:
Less critical
Impact: Privilege escalation
Where: Local system
Solution Status: Vendor Patch

OS:Debian GNU/Linux 3.0
Debian GNU/Linux 3.1
Debian GNU/Linux unstable alias sid

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2005-4536


Description:
Debian has issued an update for libmail-audit-perl. This fixes a vulnerability, which can be exploited by malicious, local users to perform certain actions on a vulnerable system with escalated privileges.

For more information:
SA18652

Solution:
Apply updated packages.

-- Debian GNU/Linux 3.0 alias woody --

Source archives:

http://security.debian.org/pool/updat...rl/libmail-audit-perl_2.0-4woody3.dsc
Size/MD5 checksum: 665 62b652343a832093ba685dd9d3b18ab8
http://security.debian.org/pool/updat...ibmail-audit-perl_2.0-4woody3.diff.gz
Size/MD5 checksum: 6129 0b41c98f1bb290f6603aeb93729d3a30
http://security.debian.org/pool/updat...rl/libmail-audit-perl_2.0.orig.tar.gz
Size/MD5 checksum: 12526 3bc6043611f0fabdd856498e25bd48f6

Architecture independent components:

http://security.debian.org/pool/updat...ibmail-audit-perl_2.0-4woody3_all.deb
Size/MD5 checksum: 29620 444067ca6bd1319996aab95fa9390de0
http://security.debian.org/pool/updat.../mail-audit-tools_2.0-4woody3_all.deb
Size/MD5 checksum: 8952 c984bed8ff43153a00a9f4b63069d2d7

-- Debian GNU/Linux 3.1 alias sarge --

Source archives:

http://security.debian.org/pool/updat...rl/libmail-audit-perl_2.1-5sarge4.dsc
Size/MD5 checksum: 788 f313503b8ffc6df1cbd903666ca8a6fc
http://security.debian.org/pool/updat...ibmail-audit-perl_2.1-5sarge4.diff.gz
Size/MD5 checksum: 4919 a3cff1ec8634add1753db93a6dccc402
http://security.debian.org/pool/updat...rl/libmail-audit-perl_2.1.orig.tar.gz
Size/MD5 checksum: 21669 b52b1142fa9ed7d847c531186f913ea6

Architecture independent components:

http://security.debian.org/pool/updat...ibmail-audit-perl_2.1-5sarge4_all.deb
Size/MD5 checksum: 42056 dd9859e1298376d1bde353fb33af4e72
http://security.debian.org/pool/updat.../mail-audit-tools_2.1-5sarge4_all.deb
Size/MD5 checksum: 12306 96515c877e6155fc4836d1b19674b28a

-- Debian GNU/Linux unstable alias sid --

Fixed in version 2.1-5.1.

Changelog:
2006-03-21: Vendor issues updated packages.

Original Advisory:
http://www.debian.org/security/2006/dsa-960

Other References:
SA18652:
http://secunia.com/advisories/18652/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. My PHP Indexer "d" File Disclosure Vulnerability // 36 views
2. phpBB "url" bbcode Script Insertion Vulnerability // 36 views
3. Joomla Mad4Joomla Mailforms Component "jid" SQL Injection // 32 views
4. Joomla Ignite Gallery Component "gallery" SQL Injection // 29 views
5. phpBB BBcode "url" Script Insertion Vulnerability // 29 views
6. WinFTP "PASV" Denial of Service Vulnerability // 29 views
7. ScriptsEz Mini Hosting Panel "dir" File Disclosure // 29 views
8. Joomla OwnBiblio Component "catid" SQL Injection // 28 views
9. Real Estates Classifieds "cat" SQL Injection Vulnerability // 26 views
10. MunzurSoft Wep Portal W3 "kat" SQL Injection Vulnerability // 26 views