Nessus Plugin #14920

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[DSA083] DSA-083-1 procmail

Family:

Debian Local Security Checks

Category:

infos

Copyright:

This script is (C) 2004 Michel Arboi

Summary:

DSA-083-1 procmail

Version:

$Revision: 1.4 $

Cve_id:

CVE-2001-0905

Bugtraq_id:

-

Xrefs:

DSA:083

Description:

Using older versions of procmail it was possible to make procmail
crash by sending it signals. On systems where procmail is installed
setuid this could be exploited to obtain unauthorized privileges.

This problem has been fixed in version 3.20 by the upstream
maintainer, included in Debian unstable, and was ported back to
version 3.15.2 which is available for the stable Debian GNU/Linux
2.2.

We recommend that you upgrade your procmail package immediately.



Solution : http://www.debian.org/security/2001/dsa-083
Risk factor : High