DSPAM Debian 'libdspam7-drv-mysql' Cron Job MySQL Calls Local Information Disclosure Vulnerability
BID:27938
Info
DSPAM Debian 'libdspam7-drv-mysql' Cron Job MySQL Calls Local Information Disclosure Vulnerability
| Bugtraq ID: | 27938 |
| Class: | Design Error |
| CVE: |
CVE-2007-6418 |
| Remote: | No |
| Local: | Yes |
| Published: | Feb 21 2008 12:00AM |
| Updated: | Feb 22 2008 04:53PM |
| Credit: | Tobias Gruetzmacher <[email protected]> discovered this issue. |
| Vulnerable: |
Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian dspam 3.6.8-5 |
| Not Vulnerable: |
Debian dspam 3.6.8-5.1 |
Discussion
Exploit / POC
Solution / Fix
DSPAM Debian 'libdspam7-drv-mysql' Cron Job MySQL Calls Local Information Disclosure Vulnerability
Solution:
Debian released dspam 3.6.8-5.1 to address this issue. Please see the references for more information.
Debian dspam 3.6.8-5
Solution:
Debian released dspam 3.6.8-5.1 to address this issue. Please see the references for more information.
Debian dspam 3.6.8-5
-
Debian dspam-doc_3.6.8-5etch1_all.deb
http://security.debian.org/pool/updates/main/d/dspam/dspam-doc_3.6.8-5 etch1_all.deb
References
DSPAM Debian 'libdspam7-drv-mysql' Cron Job MySQL Calls Local Information Disclosure Vulnerability
References:
References: