Security Advisory (MDKSA-2004:014): metamail

[aru]

MandrakeSoft Security Advisory MDKSA-2004:014 : metamail

 

February 18th, 2004

Updated metamail packages fix buffer overflow vulnerabilities

 

Two format string and two buffer overflow vulnerabilities were discovered in metamail by Ulf Harnhammar. The updated packages are patched to fix these holes.

 

 

The released versions of Mandrake GNU/Linux affected are:

• 9.0
  
• 9.1
  
• 9.2
  
• 9.2/AMD64
  
• Corporate Server 2.1
  

Full information about this advisory, including the updated packages, is available at:

www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:014

 

Other references:

http://cve.mitre.org/cgi-bin/cvename.cgi?n...e=CAN-2004-0104

http://cve.mitre.org/cgi-bin/cvename.cgi?n...e=CAN-2004-0105

 

Posted automatically by aru (mdksec2mub v0.0.8)