• info
• discussion
• exploit
• solution
• references

Nullmailer Invalid User Denial Of Service Vulnerability

Solution:
Debian has released DSA 198-1. Fixes have been made available.

Fixes:


nullmailer nullmailer 1.0 RC5

• Debian nullmailer_1.00RC5-16.1woody2.diff.gz
  http://security.debian.org/pool/updates/main/n/nullmailer/nullmailer_1 .00RC5-16.1woody2.diff.gz


• Debian nullmailer_1.00RC5-16.1woody2.dsc
  http://security.debian.org/pool/updates/main/n/nullmailer/nullmailer_1 .00RC5-16.1woody2.dsc


• Debian nullmailer_1.00RC5-16.1woody2_alpha.deb
  http://security.debian.org/pool/updates/main/n/nullmailer/nullmailer_1 .00RC5-16.1woody2_alpha.deb


• Debian nullmailer_1.00RC5-16.1woody2_arm.deb
  http://security.debian.org/pool/updates/main/n/nullmailer/nullmailer_1 .00RC5-16.1woody2_arm.deb


• Debian nullmailer_1.00RC5-16.1woody2_hppa.deb
  http://security.debian.org/pool/updates/main/n/nullmailer/nullmailer_1 .00RC5-16.1woody2_hppa.deb


• Debian nullmailer_1.00RC5-16.1woody2_i386.deb
  http://security.debian.org/pool/updates/main/n/nullmailer/nullmailer_1 .00RC5-16.1woody2_i386.deb


• Debian nullmailer_1.00RC5-16.1woody2_ia64.deb
  http://security.debian.org/pool/updates/main/n/nullmailer/nullmailer_1 .00RC5-16.1woody2_ia64.deb


• Debian nullmailer_1.00RC5-16.1woody2_m68k.deb
  http://security.debian.org/pool/updates/main/n/nullmailer/nullmailer_1 .00RC5-16.1woody2_m68k.deb


• Debian nullmailer_1.00RC5-16.1woody2_mips.deb
  http://security.debian.org/pool/updates/main/n/nullmailer/nullmailer_1 .00RC5-16.1woody2_mips.deb


• Debian nullmailer_1.00RC5-16.1woody2_mipsel.deb
  http://security.debian.org/pool/updates/main/n/nullmailer/nullmailer_1 .00RC5-16.1woody2_mipsel.deb


• Debian nullmailer_1.00RC5-16.1woody2_powerpc.deb
  http://security.debian.org/pool/updates/main/n/nullmailer/nullmailer_1 .00RC5-16.1woody2_powerpc.deb


• Debian nullmailer_1.00RC5-16.1woody2_s390.deb
  http://security.debian.org/pool/updates/main/n/nullmailer/nullmailer_1 .00RC5-16.1woody2_s390.deb


• Debian nullmailer_1.00RC5-16.1woody2_sparc.deb
  http://security.debian.org/pool/updates/main/n/nullmailer/nullmailer_1 .00RC5-16.1woody2_sparc.deb


• Debian nullmailer_1.00RC5.orig.tar.gz
  http://security.debian.org/pool/updates/main/n/nullmailer/nullmailer_1 .00RC5.orig.tar.gz