1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Linux/Unix e-mail flaw leaves system wide open

Discussion in 'News' started by tripwire45, Aug 25, 2005.

  1. tripwire45
    Honorary Member

    tripwire45 Zettabyte Poster

    13,493
    179
    287

    Linux/Unix e-mail flaw leaves system wide open



    Two serious security flaws have turned up in software widely distributed with Linux and Unix. The bugs affect Elm (Electronic Mail for Unix), a venerable e-mail client still used by many Linux and Unix sysadmins, and Mplayer, a cross-platform movie player that is one of the most popular of its kind on Linux. The Elm flaw involves a boundary error when the client reads an e-mail's "Expires" header. A specially crafted e-mail could exploit the bug to cause a buffer overflow and execute malicious code on a system, according to security researchers. Adding to the flaw's potential impact, exploit code has begun circulating on the Internet, according to FrSIRT, the French Security Incident Response Team, which published sample code on its site.

    For the rest of the story, click Here
     
    Certifications: A+ and Network+
porta2_tags:

Comments

    1. Jakamoko
      Jakamoko
      Thanks Trip - a friend of mine is in the process of setting up a Linux server to act as a mail server - I'll make sure he sees this :)

    Share This Page