• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Focus On: Vista
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns

• info
• discussion
• exploit
• solution
• references

Procmail Unsafe Signal Handling Race Condition Vulnerability

Solution:
Vendor-supplied packages that rectify this issue are available:


Procmail Procmail 3.10

• RedHat 5.2 alpha procmail-3.21-0.52.alpha.rpm
  ftp://updates.redhat.com/5.2/en/os/alpha/procmail-3.21-0.52.alpha.rpm


• RedHat 5.2 i386 procmail-3.21-0.52.i386.rpm
  ftp://updates.redhat.com/5.2/en/os/i386/procmail-3.21-0.52.i386.rpm


• RedHat 5.2 sparc procmail-3.21-0.52.sparc.rpm
  ftp://updates.redhat.com/5.2/en/os/sparc/procmail-3.21-0.52.sparc.rpm

Procmail Procmail 3.14

• RedHat 6.2 alpha procmail-3.21-0.62.alpha.rpm
  ftp://updates.redhat.com/6.2/en/os/alpha/procmail-3.21-0.62.alpha.rpm


• RedHat 6.2 i386 procmail-3.21-0.62.i386.rpm
  ftp://updates.redhat.com/6.2/en/os/i386/procmail-3.21-0.62.i386.rpm


• RedHat 6.2 sparc procmail-3.21-0.62.sparc.rpm
  ftp://updates.redhat.com/6.2/en/os/sparc/procmail-3.21-0.62.sparc.rpm


• RedHat 7.0 alpha procmail-3.21-0.71.alpha.rpm
  ftp://updates.redhat.com/7.0/en/os/alpha/procmail-3.21-0.71.alpha.rpm


• RedHat 7.0 i386 procmail-3.21-0.71.i386.rpm
  ftp://updates.redhat.com/7.0/en/os/i386/procmail-3.21-0.71.i386.rpm


• RedHat 7.1 alpha procmail-3.21-0.71.alpha.rpm
  ftp://updates.redhat.com/7.1/en/os/alpha/procmail-3.21-0.71.alpha.rpm


• RedHat 7.1 i386 procmail-3.21-0.71.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/procmail-3.21-0.71.i386.rpm


• RedHat 7.1 ia64 procmail-3.21-0.71.ia64.rpm
  ftp://updates.redhat.com/7.1/en/os/ia64/procmail-3.21-0.71.ia64.rpm

Procmail Procmail 3.15

• MandrakeSoft 1.0.1 i586 procmail-3.15.2-1.4mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 7.1 i586 procmail-3.15.2-1.4mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 7.2 i586 procmail-3.15.2-1.3mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 8.0 i586 procmail-3.15.2-1.2mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 8.0 ppc procmail-3.15.2-1.2mdk.ppc.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft snf7.2 procmail-3.15.2-1.3mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3

Procmail Procmail 3.20

• MandrakeSoft 8.1 i586 procmail-3.22-1.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3