Secunia - Stay Secure
Home Corporate Website Jobs Updated Mailing Lists RSS Blog  Online Shop Advertise
Software Inspectors
  Scan Online
  Personal (PSI)
  Network (NSI 2.0)

Solutions For
  Security Professionals
  Security Vendors

Free Solutions For
  Open Communities
  Journalists & Media

Secunia Advisories
  Search
  Historic Advisories
  Listed By Product
  Listed By Vendor
  Statistics / Graphs
  Secunia Research
  Report Vulnerability
  About Advisories

Virus Information
  Chronological List
  Last 10 Virus Alerts
  About Virus Information

Secunia Customers
  Customer Area


Ubuntu update for mozilla-thunderbird Advisory Available in Danish 

Secunia Advisory: SA22055  
Release Date: 2006-09-22

Critical:
Highly critical
Impact: Security Bypass
Cross Site Scripting
DoS
System access
Where: From remote
Solution Status: Vendor Patch

OS:Ubuntu Linux 5.10


CVE reference:CVE-2006-3113 (Secunia mirror)
CVE-2006-3802 (Secunia mirror)
CVE-2006-3803 (Secunia mirror)
CVE-2006-3804 (Secunia mirror)
CVE-2006-3805 (Secunia mirror)
CVE-2006-3806 (Secunia mirror)
CVE-2006-3807 (Secunia mirror)
CVE-2006-3809 (Secunia mirror)
CVE-2006-3810 (Secunia mirror)
CVE-2006-3811 (Secunia mirror)
CVE-2006-3812 (Secunia mirror)
CVE-2006-4253 (Secunia mirror)
CVE-2006-4340 (Secunia mirror)
CVE-2006-4565 (Secunia mirror)
CVE-2006-4566 (Secunia mirror)
CVE-2006-4567 (Secunia mirror)
CVE-2006-4570 (Secunia mirror)
CVE-2006-4571 (Secunia mirror)

Want to know the next time vulnerabilities are fixed in this product?
- Companies can be alerted via email and SMS!


Description:
Ubuntu has issued an update for mozilla-thunderbird. This fixes some vulnerabilities, which can be exploited by malicious people to conduct man-in-the-middle and cross-site scripting attacks, bypass certain security restrictions and compromise a user's system.

For more information:
SA21228
SA21939

Solution:
Apply updated packages:

-- Ubuntu 5.10 --

Source archives:

http://security.ubuntu.com/ubuntu/poo...derbird_1.5.0.7-0ubuntu0.5.10.diff.gz
Size/MD5: 451765 f226c2d1fb27ff7d1901563c0e7ae6aa
http://security.ubuntu.com/ubuntu/poo...thunderbird_1.5.0.7-0ubuntu0.5.10.dsc
Size/MD5: 960 33f4c6cf8f964b3bbf0cb7bf2a9b3a41
http://security.ubuntu.com/ubuntu/poo...zilla-thunderbird_1.5.0.7.orig.tar.gz
Size/MD5: 35412353 4e43a174c53adf09382a4f959b86abe6
http://security.ubuntu.com/ubuntu/poo...l/enigmail_0.94-0ubuntu0.5.10.diff.gz
Size/MD5: 20864 3aee73c8c9d639372dc3f28a5f145324
http://security.ubuntu.com/ubuntu/poo...gmail/enigmail_0.94-0ubuntu0.5.10.dsc
Size/MD5: 785 25206240fb199da5bbb5ab080600b0d5
http://security.ubuntu.com/ubuntu/pool/main/e/enigmail/enigmail_0.94.orig.tar.gz
Size/MD5: 3126659 7e34cbe51f5a1faca2e26fa0edfd6a06
http://security.ubuntu.com/ubuntu/poo...nderbird-locale-ca_1.5-ubuntu5.10.dsc
Size/MD5: 598 1d99f1f9e4dee5e65e3783a5f97dd263
http://security.ubuntu.com/ubuntu/poo...rbird-locale-ca_1.5-ubuntu5.10.tar.gz
Size/MD5: 194758 ef06a28aee74c384480bc0ab4b4b884c
http://security.ubuntu.com/ubuntu/poo...nderbird-locale-de_1.5-ubuntu5.10.dsc
Size/MD5: 596 4fa9a37540021ec258720b4870bb96d7
http://security.ubuntu.com/ubuntu/poo...rbird-locale-de_1.5-ubuntu5.10.tar.gz
Size/MD5: 169713 7c1002115108c1ed63d270a8d679b039
http://security.ubuntu.com/ubuntu/poo...nderbird-locale-fr_1.5-ubuntu5.10.dsc
Size/MD5: 599 ef565a49f01984cf671542e909fc9585
http://security.ubuntu.com/ubuntu/poo...rbird-locale-fr_1.5-ubuntu5.10.tar.gz
Size/MD5: 204062 8a1ef43eccb78e45895bd1bff458d0fe
http://security.ubuntu.com/ubuntu/poo...nderbird-locale-it_1.5-ubuntu5.10.dsc
Size/MD5: 601 90e8f323e3bc9a5f46c4a97a509cfc93
http://security.ubuntu.com/ubuntu/poo...rbird-locale-it_1.5-ubuntu5.10.tar.gz
Size/MD5: 158517 cddf397975e97c0dbd7152f387655303
http://security.ubuntu.com/ubuntu/poo...nderbird-locale-nl_1.5-ubuntu5.10.dsc
Size/MD5: 596 b4d740d0e33dde12c978b8f7385f690d
http://security.ubuntu.com/ubuntu/poo...rbird-locale-nl_1.5-ubuntu5.10.tar.gz
Size/MD5: 195416 fc5bc7dc7388131564bdbbd16ab10b93
http://security.ubuntu.com/ubuntu/poo...nderbird-locale-pl_1.5-ubuntu5.10.dsc
Size/MD5: 632 de741d572f4ab22f99793aa3cfbe20e3
http://security.ubuntu.com/ubuntu/poo...rbird-locale-pl_1.5-ubuntu5.10.tar.gz
Size/MD5: 192583 5cf008def5286ed0054a0a5015607cf7
http://security.ubuntu.com/ubuntu/poo...nderbird-locale-uk_1.5-ubuntu5.10.dsc
Size/MD5: 589 330958f8cb291d10cdc0196768233ad0
http://security.ubuntu.com/ubuntu/poo...rbird-locale-uk_1.5-ubuntu5.10.tar.gz
Size/MD5: 11499 dd66aaa9efadb412e3122657a2da25fa

Architecture independent packages:

http://security.ubuntu.com/ubuntu/poo...bird-locale-ca_1.5-ubuntu5.10_all.deb
Size/MD5: 189666 473e996d047d43f6dd7bec92d53cfa03
http://security.ubuntu.com/ubuntu/poo...bird-locale-de_1.5-ubuntu5.10_all.deb
Size/MD5: 167484 20623a5c44dc5b2196da99eed084b8b8
http://security.ubuntu.com/ubuntu/poo...bird-locale-fr_1.5-ubuntu5.10_all.deb
Size/MD5: 197384 6a49d6b1d63c6fbf5a5ba552916d933a
http://security.ubuntu.com/ubuntu/poo...bird-locale-it_1.5-ubuntu5.10_all.deb
Size/MD5: 153016 c1e4f810878dfb4ea7a98422e566bab7
http://security.ubuntu.com/ubuntu/poo...bird-locale-nl_1.5-ubuntu5.10_all.deb
Size/MD5: 195206 a2b2c8189f2bdbd52ba207e467404e18
http://security.ubuntu.com/ubuntu/poo...bird-locale-pl_1.5-ubuntu5.10_all.deb
Size/MD5: 186030 4d1c2103ee676e569c0feb553161107c
http://security.ubuntu.com/ubuntu/poo...bird-locale-uk_1.5-ubuntu5.10_all.deb
Size/MD5: 11860 088e396b7bc681bbf773232e1fc62b7d

amd64 architecture (Athlon64, Opteron, EM64T Xeon)

http://security.ubuntu.com/ubuntu/poo...d-dev_1.5.0.7-0ubuntu0.5.10_amd64.deb
Size/MD5: 3523522 a76de9534e4f7062f6ca1089ba190b95
http://security.ubuntu.com/ubuntu/poo...ector_1.5.0.7-0ubuntu0.5.10_amd64.deb
Size/MD5: 190306 74bda8f95e40506db2eb9522ff5a0aad
http://security.ubuntu.com/ubuntu/poo...dfind_1.5.0.7-0ubuntu0.5.10_amd64.deb
Size/MD5: 55528 5bba85b882ef03b8d6abf6a30ee87581
http://security.ubuntu.com/ubuntu/poo...rbird_1.5.0.7-0ubuntu0.5.10_amd64.deb
Size/MD5: 11976232 2d6fd4f9dfc0f141d9deb7321d8c3d4f
http://security.ubuntu.com/ubuntu/poo...enigmail_0.94-0ubuntu0.5.10_amd64.deb
Size/MD5: 334962 a958117e8d86e698a1e0486169086c96

i386 architecture (x86 compatible Intel/AMD)

http://security.ubuntu.com/ubuntu/poo...rd-dev_1.5.0.7-0ubuntu0.5.10_i386.deb
Size/MD5: 3516366 c0f3feae48b1c6aa62f3423279be2725
http://security.ubuntu.com/ubuntu/poo...pector_1.5.0.7-0ubuntu0.5.10_i386.deb
Size/MD5: 183652 664776fcb3fcc35bb58e7edbc3a5492b
http://security.ubuntu.com/ubuntu/poo...adfind_1.5.0.7-0ubuntu0.5.10_i386.deb
Size/MD5: 51154 d35f0c9b0ad24a3ecb16c3ce29cd5427
http://security.ubuntu.com/ubuntu/poo...erbird_1.5.0.7-0ubuntu0.5.10_i386.deb
Size/MD5: 10282110 16ef30b246a84f1872129c6ecd9d0a75
http://security.ubuntu.com/ubuntu/poo...-enigmail_0.94-0ubuntu0.5.10_i386.deb
Size/MD5: 322874 fdfb2bb51b8b360734169d9a6362bfb7

powerpc architecture (Apple Macintosh G3/G4/G5)

http://security.ubuntu.com/ubuntu/poo...dev_1.5.0.7-0ubuntu0.5.10_powerpc.deb
Size/MD5: 3520948 5d6db52b3aa4ea827dae5d2d1d42ade1
http://security.ubuntu.com/ubuntu/poo...tor_1.5.0.7-0ubuntu0.5.10_powerpc.deb
Size/MD5: 187002 2998ab2a9287273f9b80ad7ce9ba5829
http://security.ubuntu.com/ubuntu/poo...ind_1.5.0.7-0ubuntu0.5.10_powerpc.deb
Size/MD5: 54712 73da47232d65de50c846c0d287ccd4ca
http://security.ubuntu.com/ubuntu/poo...ird_1.5.0.7-0ubuntu0.5.10_powerpc.deb
Size/MD5: 11523006 c8d86889f60569a3d578241e63f89f11
http://security.ubuntu.com/ubuntu/poo...igmail_0.94-0ubuntu0.5.10_powerpc.deb
Size/MD5: 326204 f25574cc20db03e78e0879b941a36600

Original Advisory:
http://www.ubuntu.com/usn/usn-350-1

Other References:
SA21228:
http://secunia.com/advisories/21228/

SA21939:
http://secunia.com/advisories/21939/



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

185 Related Secunia Security Advisories, displaying 10

1. Ubuntu update for kdelibs and qt-x11-free
2. Ubuntu update for ipsec-tools
3. Ubuntu update for freetype, libxfont, xorg, and xorg-server
4. Ubuntu update for krb5
5. Ubuntu update for openoffice.org
6. Ubuntu update for xmms
7. Ubuntu update for nas
8. Ubuntu update for file
9. Ubuntu update for inkscape
10. Ubuntu update for libwpd

Show all related advisories


Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.








Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Do you think it's important to read Setup/User Guides for applications for use within your network?


See Results   


Most Popular Advisories

1.
Webex Meeting Manager WebexUCFObject ActiveX Control Buffer Overflow
2.
PowerDNS Malformed Queries Handling Weakness
3.
Contenido Unspecified File Inclusion Vulnerabilities
4.
Gentoo update for libxslt
5.
Xoops Kshop Module "search" Cross-Site Scripting
6.
csphonebook "letter" Cross-Site Scripting
7.
8e6 R3000 "Host" URL Filter Bypass Vulnerability
8.
CA Products Ingres Multiple Vulnerabilities
9.
HP-UX libc Denial of Service Vulnerability
10.
Free Hosting Manager Insecure Cookie Handling Vulnerability





Vulnerability Management - Terms & Conditions - Copyright 2002-2008 Secunia - Compliance - Contact Secunia