Vyatta – Linux & Open Source Alternative to Cisco – Advanced Routing, Firewall, VPN, QoS..
Free Download ->

LWN.net Weekly Edition for October 2, 2008

openSUSE and the distribution of proprietary software

Weekly edition	Kernel	Security	Distributions	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ

masqmail: input sanitizing and symlink vulnerabilities

Package(s):

masqmail

CVE #(s):

CAN-2005-2662 CAN-2005-2663

Created:

September 21, 2005

Updated:

October 10, 2005

Description:

Masqmail fails to properly sanitize addresses when sending failed mail, allowing a local attacker to run arbitrary commands as the mail user. There is also a symlink vulnerability which can be exploited to overwrite files.

Alerts:

Debian	DSA-848-1	2005-10-08
Mandriva	MDKSA-2005:168	2005-09-20

(Log in to post comments)