exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

Mandriva Linux Security Advisory 2008-117

Mandriva Linux Security Advisory 2008-117
Posted Jun 20, 2008
Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory - A flaw in fetchmail was discovered that allowed remote attackers to cause a denial of service (crash and persistent mail failure) via a malformed message with long headers. The crash only occurred when fetchmail was called in '-v -v' mode.

tags | advisory, remote, denial of service
systems | linux, mandriva
advisories | CVE-2008-2711
SHA-256 | 05c7b5e24c351d39bc41c007234a43dc6f5e1acd503ab7b1e453c1579e3d222b

Mandriva Linux Security Advisory 2008-117

Change Mirror Download

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2008:117
http://www.mandriva.com/security/
_______________________________________________________________________

Package : fetchmail
Date : June 19, 2008
Affected: 2007.1, 2008.0, 2008.1, Corporate 3.0, Corporate 4.0
_______________________________________________________________________

Problem Description:

A flaw in fetchmail was discovered that allowed remote attackers
to cause a denial of service (crash and persistent mail failure)
via a malformed message with long headers. The crash only occured
when fetchmail was called in '-v -v' mode (CVE-2008-2711).

The updated packages have been patched to prevent this issue.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2711
_______________________________________________________________________

Updated Packages:

Mandriva Linux 2007.1:
77b20fed31ffc8f26b91b289b1735742 2007.1/i586/fetchmail-6.3.6-1.3mdv2007.1.i586.rpm
48d0099eb291e7ed6de0ee268f483be4 2007.1/i586/fetchmailconf-6.3.6-1.3mdv2007.1.i586.rpm
efc2563d1ab82b6d0f32762caefa2439 2007.1/i586/fetchmail-daemon-6.3.6-1.3mdv2007.1.i586.rpm
a208f8c8096e5204fa17f749c369fa4c 2007.1/SRPMS/fetchmail-6.3.6-1.3mdv2007.1.src.rpm

Mandriva Linux 2007.1/X86_64:
f9a9f4086f217c01330a39db69976a80 2007.1/x86_64/fetchmail-6.3.6-1.3mdv2007.1.x86_64.rpm
64fbf2cba15a7871884859263832effa 2007.1/x86_64/fetchmailconf-6.3.6-1.3mdv2007.1.x86_64.rpm
826669b445b5107862a07d9b0e75bfb9 2007.1/x86_64/fetchmail-daemon-6.3.6-1.3mdv2007.1.x86_64.rpm
a208f8c8096e5204fa17f749c369fa4c 2007.1/SRPMS/fetchmail-6.3.6-1.3mdv2007.1.src.rpm

Mandriva Linux 2008.0:
44bf754420177032e7720aa6385d92dd 2008.0/i586/fetchmail-6.3.8-4.1mdv2008.0.i586.rpm
090719d821a64ebc3ac486bfc1b90363 2008.0/i586/fetchmailconf-6.3.8-4.1mdv2008.0.i586.rpm
836dbd2dda8acb1267bfaedfb342a1b7 2008.0/i586/fetchmail-daemon-6.3.8-4.1mdv2008.0.i586.rpm
67ccd52b855904cdab9c59403ca75144 2008.0/SRPMS/fetchmail-6.3.8-4.1mdv2008.0.src.rpm

Mandriva Linux 2008.0/X86_64:
ffd538cbfe8476577c172088e6ab6ccd 2008.0/x86_64/fetchmail-6.3.8-4.1mdv2008.0.x86_64.rpm
bba7c59daafdf2b922fdc49c8289e950 2008.0/x86_64/fetchmailconf-6.3.8-4.1mdv2008.0.x86_64.rpm
5ba2c860cdf76975243aa95f637e5bfa 2008.0/x86_64/fetchmail-daemon-6.3.8-4.1mdv2008.0.x86_64.rpm
67ccd52b855904cdab9c59403ca75144 2008.0/SRPMS/fetchmail-6.3.8-4.1mdv2008.0.src.rpm

Mandriva Linux 2008.1:
3183a6eecffd1d3f28cc653d7c1154cb 2008.1/i586/fetchmail-6.3.8-7.1mdv2008.1.i586.rpm
332305442e6617b3c6e8477b8873d671 2008.1/i586/fetchmailconf-6.3.8-7.1mdv2008.1.i586.rpm
64f5cd910f5e25a82eb673fc3e017f7d 2008.1/i586/fetchmail-daemon-6.3.8-7.1mdv2008.1.i586.rpm
b4625b074ae3f30016eca5beedddda85 2008.1/SRPMS/fetchmail-6.3.8-7.1mdv2008.1.src.rpm

Mandriva Linux 2008.1/X86_64:
afa1fe93700e16c207b26466c379dba0 2008.1/x86_64/fetchmail-6.3.8-7.1mdv2008.1.x86_64.rpm
38fc1cb8e9b6a838fd7aaac05cbdfd6c 2008.1/x86_64/fetchmailconf-6.3.8-7.1mdv2008.1.x86_64.rpm
96413fc60a0d5c961e69c5ecae03001c 2008.1/x86_64/fetchmail-daemon-6.3.8-7.1mdv2008.1.x86_64.rpm
b4625b074ae3f30016eca5beedddda85 2008.1/SRPMS/fetchmail-6.3.8-7.1mdv2008.1.src.rpm

Corporate 3.0:
8ea71c3755960b09d7f24de64d26f8cd corporate/3.0/i586/fetchmail-6.2.5-3.7.C30mdk.i586.rpm
d56338486e23c1b4bed562feaeaa9a7b corporate/3.0/i586/fetchmailconf-6.2.5-3.7.C30mdk.i586.rpm
2a9a1ea5b35a6079de582d4a023263e3 corporate/3.0/i586/fetchmail-daemon-6.2.5-3.7.C30mdk.i586.rpm
9b1b9c5cab6b2c81b11f26b7587aa096 corporate/3.0/SRPMS/fetchmail-6.2.5-3.7.C30mdk.src.rpm

Corporate 3.0/X86_64:
84203e2a84ad1772a78ba5b5c9c33a2f corporate/3.0/x86_64/fetchmail-6.2.5-3.7.C30mdk.x86_64.rpm
3d6dbf92ffc9101a765decbe530437c9 corporate/3.0/x86_64/fetchmailconf-6.2.5-3.7.C30mdk.x86_64.rpm
156c24d040be43da88842d5ee27b40ba corporate/3.0/x86_64/fetchmail-daemon-6.2.5-3.7.C30mdk.x86_64.rpm
9b1b9c5cab6b2c81b11f26b7587aa096 corporate/3.0/SRPMS/fetchmail-6.2.5-3.7.C30mdk.src.rpm

Corporate 4.0:
1f69a551eb9f1afbbe6e42be597b1ba1 corporate/4.0/i586/fetchmail-6.2.5-11.6.20060mlcs4.i586.rpm
421360e6dee540b9d4e28b274724e604 corporate/4.0/i586/fetchmailconf-6.2.5-11.6.20060mlcs4.i586.rpm
6451f4757de94be5d5a5c8542c8e703b corporate/4.0/i586/fetchmail-daemon-6.2.5-11.6.20060mlcs4.i586.rpm
1c3a942647354d1de2b6abe0253e02b0 corporate/4.0/SRPMS/fetchmail-6.2.5-11.6.20060mlcs4.src.rpm

Corporate 4.0/X86_64:
c9101af89574256bba203cd4f7e215c1 corporate/4.0/x86_64/fetchmail-6.2.5-11.6.20060mlcs4.x86_64.rpm
938b40ccf9dcade9edf7347fdd42324b corporate/4.0/x86_64/fetchmailconf-6.2.5-11.6.20060mlcs4.x86_64.rpm
990a1f0e7642ce75a4923a24990b0b68 corporate/4.0/x86_64/fetchmail-daemon-6.2.5-11.6.20060mlcs4.x86_64.rpm
1c3a942647354d1de2b6abe0253e02b0 corporate/4.0/SRPMS/fetchmail-6.2.5-11.6.20060mlcs4.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFIWwvFmqjQ0CJFipgRAmuMAJ9RKHOnL0QPdrTOCH8N5ws9EHOO3wCg3RXb
xCFh6pZYZPeM9sOT/TVtYDk=
=DIA4
-----END PGP SIGNATURE-----
Login or Register to add favorites

File Archive:

March 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Mar 1st
    16 Files
  • 2
    Mar 2nd
    0 Files
  • 3
    Mar 3rd
    0 Files
  • 4
    Mar 4th
    32 Files
  • 5
    Mar 5th
    28 Files
  • 6
    Mar 6th
    42 Files
  • 7
    Mar 7th
    17 Files
  • 8
    Mar 8th
    13 Files
  • 9
    Mar 9th
    0 Files
  • 10
    Mar 10th
    0 Files
  • 11
    Mar 11th
    15 Files
  • 12
    Mar 12th
    19 Files
  • 13
    Mar 13th
    21 Files
  • 14
    Mar 14th
    38 Files
  • 15
    Mar 15th
    15 Files
  • 16
    Mar 16th
    0 Files
  • 17
    Mar 17th
    0 Files
  • 18
    Mar 18th
    10 Files
  • 19
    Mar 19th
    32 Files
  • 20
    Mar 20th
    46 Files
  • 21
    Mar 21st
    16 Files
  • 22
    Mar 22nd
    13 Files
  • 23
    Mar 23rd
    0 Files
  • 24
    Mar 24th
    0 Files
  • 25
    Mar 25th
    12 Files
  • 26
    Mar 26th
    31 Files
  • 27
    Mar 27th
    19 Files
  • 28
    Mar 28th
    0 Files
  • 29
    Mar 29th
    0 Files
  • 30
    Mar 30th
    0 Files
  • 31
    Mar 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close