Secunia - Stay Secure
Home Corporate Website Jobs Updated Mailing Lists RSS Blog  Online Shop Advertise
Software Inspectors
  Scan Online
  Personal (PSI)
  Network (NSI 2.0)

Solutions For
  Security Professionals
  Security Vendors

Free Solutions For
  Open Communities
  Journalists & Media

Secunia Advisories
  Search
  Historic Advisories
  Listed By Product
  Listed By Vendor
  Statistics / Graphs
  Secunia Research
  Report Vulnerability
  About Advisories

Virus Information
  Chronological List
  Last 10 Virus Alerts
  About Virus Information

Secunia Customers
  Customer Area


Ubuntu update for mailman Advisory Available in Danish 

Secunia Advisory: SA18456  
Release Date: 2006-01-16

Critical:
Moderately critical
Impact: DoS
Where: From remote
Solution Status: Vendor Patch

OS:Ubuntu Linux 4.10
Ubuntu Linux 5.04
Ubuntu Linux 5.10


CVE reference:CVE-2005-3573 (Secunia mirror)
CVE-2005-4153 (Secunia mirror)

Want to know the next time vulnerabilities are fixed in this product?
- Companies can be alerted via email and SMS!


Description:
Ubuntu has issued an update for mailman. This fixes two vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service).

For more information:
SA17511
SA18449

Solution:
Apply updated packages.

-- Ubuntu 4.10 --

Source archives:

http://security.ubuntu.com/ubuntu/poo...lman/mailman_2.1.5-1ubuntu2.5.diff.gz
Size/MD5: 128899 1686924bbacf9fefa556fd7f1e8f74dc
http://security.ubuntu.com/ubuntu/poo.../mailman/mailman_2.1.5-1ubuntu2.5.dsc
Size/MD5: 658 65e41dc9eb2456d8189aea0eb4df64ae
http://security.ubuntu.com/ubuntu/pool/main/m/mailman/mailman_2.1.5.orig.tar.gz
Size/MD5: 5745912 f5f56f04747cd4aff67427e7a45631af

amd64 architecture (Athlon64, Opteron, EM64T Xeon)

http://security.ubuntu.com/ubuntu/poo...an/mailman_2.1.5-1ubuntu2.5_amd64.deb
Size/MD5: 6602720 b559d0c6c0c8d97dc6ea342a4911d154

i386 architecture (x86 compatible Intel/AMD)

http://security.ubuntu.com/ubuntu/poo...man/mailman_2.1.5-1ubuntu2.5_i386.deb
Size/MD5: 6602194 ad5e65cead5a9d90ddbffc736337fb94

powerpc architecture (Apple Macintosh G3/G4/G5)

http://security.ubuntu.com/ubuntu/poo.../mailman_2.1.5-1ubuntu2.5_powerpc.deb
Size/MD5: 6611016 89feb8e459fa9f34ff91c8bbf75f3a80

-- Ubuntu 5.04 --

Source archives:

http://security.ubuntu.com/ubuntu/poo...lman/mailman_2.1.5-7ubuntu0.1.diff.gz
Size/MD5: 118355 78b91e2f11e438ef259c3e67e6fd1d47
http://security.ubuntu.com/ubuntu/poo.../mailman/mailman_2.1.5-7ubuntu0.1.dsc
Size/MD5: 669 99b42b16f8c4ba4e8acacc73920d1639
http://security.ubuntu.com/ubuntu/pool/main/m/mailman/mailman_2.1.5.orig.tar.gz
Size/MD5: 5745912 f5f56f04747cd4aff67427e7a45631af

amd64 architecture (Athlon64, Opteron, EM64T Xeon)

http://security.ubuntu.com/ubuntu/poo...an/mailman_2.1.5-7ubuntu0.1_amd64.deb
Size/MD5: 6609778 28b3e1f005cbcc097fb084ba3b0c313b

i386 architecture (x86 compatible Intel/AMD)

http://security.ubuntu.com/ubuntu/poo...man/mailman_2.1.5-7ubuntu0.1_i386.deb
Size/MD5: 6609308 f80df6c6bc8f6a028d065c8892849569

powerpc architecture (Apple Macintosh G3/G4/G5)

http://security.ubuntu.com/ubuntu/poo.../mailman_2.1.5-7ubuntu0.1_powerpc.deb
Size/MD5: 6616534 f33e0b4a6d2afea8aa96f3e86fdfe579

-- Ubuntu 5.10 --

Source archives:

http://security.ubuntu.com/ubuntu/poo...lman/mailman_2.1.5-8ubuntu2.1.diff.gz
Size/MD5: 194039 fd67dfe7d97bd94e9ad0e0575599639d
http://security.ubuntu.com/ubuntu/poo.../mailman/mailman_2.1.5-8ubuntu2.1.dsc
Size/MD5: 626 63366d888d62e4769c331c7303716c2e
http://security.ubuntu.com/ubuntu/pool/main/m/mailman/mailman_2.1.5.orig.tar.gz
Size/MD5: 5745912 f5f56f04747cd4aff67427e7a45631af

amd64 architecture (Athlon64, Opteron, EM64T Xeon)

http://security.ubuntu.com/ubuntu/poo...an/mailman_2.1.5-8ubuntu2.1_amd64.deb
Size/MD5: 6610440 165e35634f6767fbab615e9407eec4c8

i386 architecture (x86 compatible Intel/AMD)

http://security.ubuntu.com/ubuntu/poo...man/mailman_2.1.5-8ubuntu2.1_i386.deb
Size/MD5: 6609374 03e1822d1085b4ff27d3ecb2912048bf

powerpc architecture (Apple Macintosh G3/G4/G5)

http://security.ubuntu.com/ubuntu/poo.../mailman_2.1.5-8ubuntu2.1_powerpc.deb
Size/MD5: 6617106 522653cd7ecdce70366a2d80b5b97460

Original Advisory:
http://www.ubuntu.com/usn/usn-242-1

Other References:
SA17511:
http://secunia.com/advisories/17511/

SA18449:
http://secunia.com/advisories/18449/



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

343 Related Secunia Security Advisories, displaying 10

1. Ubuntu update for kdelibs and qt-x11-free
2. Ubuntu update for ipsec-tools
3. Ubuntu update for freetype, libxfont, xorg, and xorg-server
4. Ubuntu update for krb5
5. Ubuntu update for openoffice.org
6. Ubuntu update for xmms
7. Ubuntu update for nas
8. Ubuntu update for file
9. Ubuntu update for inkscape
10. Ubuntu update for libwpd

Show all related advisories


Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.








Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Do you think it's important to read Setup/User Guides for applications for use within your network?


See Results   


Most Popular Advisories

1.
dotProject SQL Injection and Cross-Site Scripting
2.
HP TCP/IP Services for OpenVMS Finger Format String Vulnerability
3.
Sun Solaris Kernel Covert Channel Security Bypass
4.
Red Hat update for libtiff
5.
IBM WebSphere Application Server for z/OS HTTP Server mod_proxy_ftp Vulnerability
6.
Novell eDirectory Multiple Vulnerabilities
7.
Adium MSN SLP Message Integer Overflow Vulnerabilities
8.
GpsDrive "geo-code" Insecure Temporary Files
9.
Novell Forum TCL Command Injection Vulnerability
10.
Ultra Office ActiveX Control Multiple Vulnerabilities





Vulnerability Management - Terms & Conditions - Copyright 2002-2008 Secunia - Compliance - Contact Secunia