• info
• discussion
• exploit
• solution
• references

Mail-Audit Insecure Temporary File Creation Vulnerability

Solution:

Please see the referenced vendor advisories for more information and fixes.

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: vuldb@securityfocus.com


Mail-Audit Mail-Audit 2.1

• Debian libmail-audit-perl_2.1-5sarge1_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/libm/libmail-audit-perl/l ibmail-audit-perl_2.1-5sarge1_all.deb


• Debian mail-audit-tools_2.1-5sarge1_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/libm/libmail-audit-perl/m ail-audit-tools_2.1-5sarge1_all.deb


• Debina libmail-audit-perl_2.1-5sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/libm/libmail-audit-perl/l ibmail-audit-perl_2.1-5sarge2_all.deb


• Debina mail-audit-tools_2.1-5sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/libm/libmail-audit-perl/m ail-audit-tools_2.1-5sarge2_all.deb

Mail-Audit Mail-Audit 2.0

• Debian libmail-audit-perl_2.0-4woody1_all.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libm/libmail-audit-perl/l ibmail-audit-perl_2.0-4woody1_all.deb


• Debian libmail-audit-perl_2.0-4woody3_all.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libm/libmail-audit-perl/l ibmail-audit-perl_2.0-4woody3_all.deb


• Debian mail-audit-tools_2.0-4woody1_all.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libm/libmail-audit-perl/m ail-audit-tools_2.0-4woody1_all.deb


• Debian mail-audit-tools_2.0-4woody3_all.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libm/libmail-audit-perl/m ail-audit-tools_2.0-4woody3_all.deb