[Savannah-hackers] bug classified critical about mailx package

[mathieu]

http://bugs.debian.org/cgi-bin/bugreport.cgi?ar\&bug=143152


Package: mailx
Severity: critical
Tags: security patch upstream

        From http://www.deadly.org/article.php3?sid=20020413161803

"The mail(1) program can be made to execute arbitrary code in non
interactive mode. this can be exploited using cron and the system
startup scripts (by any local user with no privs) a patch is and
advisory is available on the advisory page."

        /usr/share/doc/mailx/copyright says "It is now based on
        OpenBSD in directory src/usr.bin/mail ...", so we're likely to
        be vulnerable.

        The deadly.org page contains an exploit, and OpenBSD has
        a patch ready.


====> maybe the subversion.gnu.org should be updated.


--
mathieu

 (( http://humeur.coleumes.org ))
 (( http://gpg.coleumes.org GPG KEY ))