Perdition-users November 2007

perdition-users@vergenet.net

9 participants
12 discussions

Re: [PERDITION-USERS] [ANNOUNCE] CVE-2007-5740 Security Bug in Perdition / Perdition 1.17.1

by Simon Matter

> > I actually built from the source-RPM provided by Simon since > I'm all RedHat here. I confess to being clueless how the RPM stuff > works beyond running rpmbuild against it. Anyone have a pointer > to information on how I could get this into an i368 RPM? I have updated the source RPM to 1.17.1: http://www.invoca.ch/pub/packages/perdition/ Regards, Simon

16 years, 6 months

[ANNOUNCE] CVE-2007-5740 Security Bug in Perdition / Perdition 1.17.1

by Simon Horman

Hi all, I wish to advise that a security vulnerability has been found in perdition which may lead to an attacker being able to execute arbitrary code on the machine running perdition without the need for authentication. Details of the bug can be found at http://archives.neohapsis.com/archives/fulldisclosure/2007-10/0889.html A Patch to resolve the problem has been committed to CVS http://perdition.cvs.sourceforge.net/perdition/perdition/perdition/imap4_in… A bug-fix release, 1.17.1 has been made. This includes a minimal set of changes on top of 1.17 http://www.vergenet.net/linux/perdition/download/1.17.1/ There are also interim Debian packages under the URL above. The bug will be hence forth tracked as CVE-2007-5740 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5740 -- Horms H: http://www.vergenet.net/~horms/ W: http://www.valinux.co.jp/en/

16 years, 6 months

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

Perdition-users November 2007