Test ID:	1.3.6.1.4.1.25623.1.0.56158
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-242-1 (mailman)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to mailman announced via advisory USN-242-1. A security issue affects the following Ubuntu releases: Ubuntu 4.10 (Warty Warthog) Ubuntu 5.04 (Hoary Hedgehog) Ubuntu 5.10 (Breezy Badger) The following packages are affected: mailman Details follow: Aliet Santiesteban Sifontes discovered a remote Denial of Service vulnerability in the attachment handler. An email with an attachment whose filename contained invalid UTF-8 characters caused mailman to crash. (CVE-2005-3573) Mailman did not sufficiently verify the validity of email dates. Very large numbers in dates caused mailman to crash. (CVE-2005-4153) Solution: The problem can be corrected by upgrading the affected package to version 2.1.5-1ubuntu2.5 (for Ubuntu 4.10), 2.1.5-7ubuntu0.1 (for Ubuntu 5.04), or 2.1.5-8ubuntu2.1 (for Ubuntu 5.10). In general, a standard system upgrade is sufficient to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-242-1 Risk factor : High CVSS Score: 7.8
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-3573 BugTraq ID: 15408 http://www.securityfocus.com/bid/15408 Debian Security Information: DSA-955 (Google Search) http://www.debian.org/security/2006/dsa-955 http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:222 http://mail.python.org/pipermail/mailman-users/2005-September/046523.html http://www.osvdb.org/20819 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10038 http://www.redhat.com/support/errata/RHSA-2006-0204.html http://securitytracker.com/id?1015735 http://secunia.com/advisories/17511 http://secunia.com/advisories/17874 http://secunia.com/advisories/18456 http://secunia.com/advisories/18503 http://secunia.com/advisories/18612 http://secunia.com/advisories/19167 http://secunia.com/advisories/19196 http://secunia.com/advisories/19532 SGI Security Advisory: 20060401-01-U ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U SuSE Security Announcement: SUSE-SR:2006:001 (Google Search) http://lists.suse.com/archive/suse-security-announce/2006-Jan/0003.html http://www.trustix.org/errata/2006/0012/ http://www.ubuntu.com/usn/usn-242-1 http://www.vupen.com/english/advisories/2005/2404 XForce ISS Database: mailman-utf8-scrubber-dos(23139) https://exchange.xforce.ibmcloud.com/vulnerabilities/23139 Common Vulnerability Exposure (CVE) ID: CVE-2005-4153 BugTraq ID: 16248 http://www.securityfocus.com/bid/16248 http://www.osvdb.org/21723 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10660 http://secunia.com/advisories/18449
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.