Secunia

Peter Winter-Smith of NGSSoftware has reported multiple vulnerabilities in LISTSERV, which can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system.

The vulnerabilities are caused due to various unspecified errors where the most severe can be exploited to execute arbitrary code.

The vulnerabilities have been reported in the following versions (other versions may also be affected):
* LISTSERV 14.3 (including LISTSERV Lite and HPO)
* LISTSERV 1.8e (including LISTSERV Lite and HPO)
* LISTSERV 1.8d (including LISTSERV Lite and HPO)

Solution
Update to version 14.3 level set 2005a or later.

Provided and/or discovered by
Peter Winter-Smith, NGSSoftware.

Changelog
Further details available in Customer Area

Original Advisory
NGSSoftware:
http://www.ngssoftware.com/advisories/listserv_2.txt

Deep Links
Links available in Customer Area