Nessus Plugin #15371

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[DSA534] DSA-534-1 mailreader

Family:

Debian Local Security Checks

Category:

infos

Copyright:

This script is (C) 2004 Michel Arboi

Summary:

DSA-534-1 mailreader

Version:

$Revision: 1.4 $

Cve_id:

CAN-2002-1581

Bugtraq_id:

6055

Xrefs:

DSA:534

Description:

A directory traversal vulnerability was discovered in mailreader
whereby remote attackers could view arbitrary files with the
privileges of the nph-mr.cgi process (by default, www-data) via
relative paths and a null byte in the configLanguage parameter.
For the current stable distribution (woody), this problem has been
fixed in version 2.3.29-5woody1.
For the unstable distribution (sid), this problem will be fixed soon.
We recommend that you update your mailreader package.


Solution : http://www.debian.org/security/2004/dsa-534
Risk factor : High