USN-78-1: Mailman vulnerability

Releases

• Ubuntu 4.10

Details

An path traversal vulnerability has been discovered in the "private"
module of Mailman. A flawed path sanitation algorithm allowed the
construction of URLS to arbitrary files readable by Mailman. This
allowed a remote attacker to retrieve configuration and password
databases, private list archives, and other files.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 4.10

• mailman -

In general, a standard system update will make all the necessary changes.

References

• CVE-2005-0202

Related notices

• USN-78-2: mailman