Nessus Plugin #16387

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

Sympa queue utility privilege escalation vulnerability

Family:

CGI abuses

Category:

attack

Copyright:

This script is Copyright (C) 2005 David Maciejak

Summary:

Checks for sympa version

Version:

$Revision: 1.2 $

Cve_id:

CAN-2005-0073

Bugtraq_id:

12527

Xrefs:

-

Description:

The remote host seems to be running sympa, an open source mailing list
management software.

The remote version of this software contains a vulnerability which can be
exploited by malicious local user to gain escalated privileges.

This issue is caused due to a boundary error in the queue utility when
processing command line arguments. This can cause a stack based buffer
overflow.

Solution : Update to Sympa version 4.1.3 or newer
See also: http://www.sympa.org/
Risk factor : Medium