Test ID:	1.3.6.1.4.1.25623.1.0.67830
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-2073-1)
Summary:	The remote host is missing an update for the Debian 'mlmmj' package(s) announced via the DSA-2073-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'mlmmj' package(s) announced via the DSA-2073-1 advisory. Vulnerability Insight: Florian Streibelt reported a directory traversal flaw in the way the Mailing List Managing Made Joyful mailing list manager processed users' requests originating from the administrator web interface without enough input validation. A remote, authenticated attacker could use these flaws to write and/or delete arbitrary files. For the stable distribution (lenny), these problems have been fixed in version 1.2.15-1.1+lenny1. For the unstable distribution (sid), these problems have been fixed in version 1.2.17-1.1. We recommend that you upgrade your mlmmj package. Affected Software/OS: 'mlmmj' package(s) on Debian 5. Solution: Please install the updated package(s). CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-4896 40658 http://secunia.com/advisories/40658 DSA-2073 http://www.debian.org/security/2010/dsa-2073 [oss-security] 20100623 CVE Request -- mlmmj -- Directory traversal flaw by editing and saving list entries via php-admin web interface http://www.openwall.com/lists/oss-security/2010/06/23/5 [oss-security] 20100623 Re: CVE Request -- mlmmj -- Directory traversal flaw by editing and saving list entries via php-admin web interface http://www.openwall.com/lists/oss-security/2010/06/23/6 [oss-security] 20100625 Re: CVE Request -- mlmmj -- Directory traversal flaw by editing and saving list entries via php-admin web interface http://www.openwall.com/lists/oss-security/2010/06/25/2 [oss-security] 20100626 Re: CVE Request -- mlmmj -- Directory traversal flaw by editing and saving list entries via php-admin web interface http://www.openwall.com/lists/oss-security/2010/06/26/1 [oss-security] 20100704 Re: CVE Request -- mlmmj -- Directory traversal flaw by editing and saving list entries via php-admin web interface http://www.openwall.com/lists/oss-security/2010/07/04/4 [oss-security] 20100706 Re: CVE Request -- mlmmj -- Directory traversal flaw by editing and saving list entries via php-admin web interface http://www.openwall.com/lists/oss-security/2010/07/06/1 http://bugs.gentoo.org/show_bug.cgi?id=259968 http://mlmmj.org/node/84 https://bugzilla.redhat.com/show_bug.cgi?id=607256
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.