No-Brainer SMTP Client Log_Msg() Remote Format String Vulnerability

Solution:
The vendor has released version 1.0 of the package to address this vulnerability.

Gentoo has released security advisory GLSA 200508-03 addressing this issue. Gentoo recommends all nbSMTP users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=mail-mta/nbsmtp-1.0"


nbSMTP nbSMTP 0.8

nbSMTP nbSMTP 0.9

nbSMTP nbSMTP 0.91

nbSMTP nbSMTP 0.92

nbSMTP nbSMTP 0.93

nbSMTP nbSMTP 0.94

nbSMTP nbSMTP 0.95

nbSMTP nbSMTP 0.96

nbSMTP nbSMTP 0.97

nbSMTP nbSMTP 0.98


 

Privacy Statement
Copyright 2010, SecurityFocus