ГлавнаяБаза уязвимостей БДУ → BDU:2015-03060
7.5высокая

BDU:2015-03060 (CVE-2009-4565)

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
Опубликовано: 2015-04-28
Описание

Множественные уязвимости пакета rmail операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно

Затрагиваемое ПО и версии
Debian GNU/Linux (до 4)
Способ устранения

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 4:
ppc:
libmilter0 - 8.13.8-3+etch1
libmilter-dev - 8.13.8-3+etch1
sendmail-bin - 8.13.8-3+etch1
rmail - 8.13.8-3+etch1
sensible-mda - 8.13.8-3+etch1
libmilter0-dbg - 8.13.8-3+etch1
s390x:
libmilter0-dbg - 8.13.8-3+etch1
libmilter0 - 8.13.8-3+etch1
libmilter-dev - 8.13.8-3+etch1
sensible-mda - 8.13.8-3+etch1
rmail - 8.13.8-3+etch1
sendmail-bin - 8.13.8-3+etch1
i686:
libmilter0 - 8.13.8-3+etch1
sendmail-bin - 8.13.8-3+etch1
rmail - 8.13.8-3+etch1
libmilter-dev - 8.13.8-3+etch1
sensible-mda - 8.13.8-3+etch1
libmilter0-dbg - 8.13.8-3+etch1
hppa:
rmail - 8.13.8-3+etch1
sensible-mda - 8.13.8-3+etch1
libmilter0 - 8.13.8-3+etch1
libmilter0-dbg - 8.13.8-3+etch1
sendmail-bin - 8.13.8-3+etch1
libmilter-dev - 8.13.8-3+etch1
sparc:
rmail - 8.13.8-3+etch1
libmilter0-dbg - 8.13.8-3+etch1
sendmail-bin - 8.13.8-3+etch1
libmilter-dev - 8.13.8-3+etch1
libmilter0 - 8.13.8-3+etch1
sensible-mda - 8.13.8-3+etch1
x86-64:
sensible-mda - 8.13.8-3+etch1
sendmail-bin - 8.13.8-3+etch1
libmilter-dev - 8.13.8-3+etch1
libmilter0-dbg - 8.13.8-3+etch1
libmilter0 - 8.13.8-3+etch1
rmail - 8.13.8-3+etch1
ia64:
libmilter0-dbg - 8.13.8-3+etch1
sensible-mda - 8.13.8-3+etch1
libmilter0 - 8.13.8-3+etch1
rmail - 8.13.8-3+etch1
libmilter-dev - 8.13.8-3+etch1
sendmail-bin - 8.13.8-3+etch1
alpha:
sensible-mda - 8.13.8-3+etch1
libmilter0 - 8.13.8-3+etch1
libmilter0-dbg - 8.13.8-3+etch1
rmail - 8.13.8-3+etch1
libmilter-dev - 8.13.8-3+etch1
sendmail-bin - 8.13.8-3+etch1
noarch:
sendmail-cf - 8.13.8-3+etch1
sendmail-doc - 8.13.8-3+etch1
sendmail - 8.13.8-3+etch1
sendmail-base - 8.13.8-3+etch1
mipsel:
sendmail-bin - 8.13.8-3+etch1
libmilter0-dbg - 8.13.8-3+etch1
libmilter0 - 8.13.8-3+etch1
libmilter-dev - 8.13.8-3+etch1
sensible-mda - 8.13.8-3+etch1
rmail - 8.13.8-3+etch1
arm:
sensible-mda - 8.13.8-3+etch1
libmilter0-dbg - 8.13.8-3+etch1
sendmail-bin - 8.13.8-3+etch1
libmilter-dev - 8.13.8-3+etch1
rmail - 8.13.8-3+etch1
libmilter0 - 8.13.8-3+etch1
Debian GNU/Linux 5:
ppc:
sendmail-bin - 8.14.3-5+lenny1
libmilter1.0.1-dbg - 8.14.3-5+lenny1
sensible-mda - 8.14.3-5+lenny1
libmilter1.0.1 - 8.14.3-5+lenny1
libmilter-dev - 8.14.3-5+lenny1
rmail - 8.14.3-5+lenny1
s390x:
rmail - 8.14.3-5+lenny1
sendmail-bin - 8.14.3-5+lenny1
libmilter1.0.1-dbg - 8.14.3-5+lenny1
libmilter-dev - 8.14.3-5+lenny1
libmilter1.0.1 - 8.14.3-5+lenny1
sensible-mda - 8.14.3-5+lenny1
i686:
rmail - 8.14.3-5+lenny1
sensible-mda - 8.14.3-5+lenny1
libmilter1.0.1 - 8.14.3-5+lenny1
libmilter1.0.1-dbg - 8.14.3-5+lenny1
libmilter-dev - 8.14.3-5+lenny1
sendmail-bin - 8.14.3-5+lenny1
hppa:
sendmail-bin - 8.14.3-5+lenny1
rmail - 8.14.3-5+lenny1
libmilter1.0.1 - 8.14.3-5+lenny1
sensible-mda - 8.14.3-5+lenny1
libmilter-dev - 8.14.3-5+lenny1
libmilter1.0.1-dbg - 8.14.3-5+lenny1
sparc:
sensible-mda - 8.14.3-5+lenny1
libmilter1.0.1 - 8.14.3-5+lenny1
libmilter-dev - 8.14.3-5+lenny1
sendmail-bin - 8.14.3-5+lenny1
rmail - 8.14.3-5+lenny1
libmilter1.0.1-dbg - 8.14.3-5+lenny1
x86-64:
sensible-mda - 8.14.3-5+lenny1
libmilter1.0.1-dbg - 8.14.3-5+lenny1
rmail - 8.14.3-5+lenny1
libmilter-dev - 8.14.3-5+lenny1
sendmail-bin - 8.14.3-5+lenny1
libmilter1.0.1 - 8.14.3-5+lenny1
armel:
libmilter1.0.1-dbg - 8.14.3-5+lenny1
libmilter-dev - 8.14.3-5+lenny1
libmilter1.0.1 - 8.14.3-5+lenny1
rmail - 8.14.3-5+lenny1
sensible-mda - 8.14.3-5+lenny1
sendmail-bin - 8.14.3-5+lenny1
alpha:
libmilter1.0.1-dbg - 8.14.3-5+lenny1
libmilter-dev - 8.14.3-5+lenny1
libmilter1.0.1 - 8.14.3-5+lenny1
rmail - 8.14.3-5+lenny1
sendmail-bin - 8.14.3-5+lenny1
sensible-mda - 8.14.3-5+lenny1
ia64:
rmail - 8.14.3-5+lenny1
sendmail-bin - 8.14.3-5+lenny1
libmilter1.0.1 - 8.14.3-5+lenny1
libmilter1.0.1-dbg - 8.14.3-5+lenny1
sensible-mda - 8.14.3-5+lenny1
libmilter-dev - 8.14.3-5+lenny1
mips:
sendmail-bin - 8.14.3-5+lenny1
libmilter1.0.1 - 8.14.3-5+lenny1
rmail - 8.14.3-5+lenny1
libmilter-dev - 8.14.3-5+lenny1
sensible-mda - 8.14.3-5+lenny1
libmilter1.0.1-dbg - 8.14.3-5+lenny1
noarch:
sendmail-cf - 8.14.3-5+lenny1
sendmail-doc - 8.14.3-5+lenny1
sendmail - 8.14.3-5+lenny1
sendmail-base - 8.14.3-5+lenny1
mipsel:
libmilter1.0.1-dbg - 8.14.3-5+lenny1
sensible-mda - 8.14.3-5+lenny1
sendmail-bin - 8.14.3-5+lenny1
rmail - 8.14.3-5+lenny1
libmilter1.0.1 - 8.14.3-5+lenny1
libmilter-dev - 8.14.3-5+lenny1
arm:
libmilter1.0.1 - 8.14.3-5+lenny1
rmail - 8.14.3-5+lenny1
libmilter-dev - 8.14.3-5+lenny1
sendmail-bin - 8.14.3-5+lenny1
libmilter1.0.1-dbg - 8.14.3-5+lenny1
sensible-mda - 8.14.3-5+lenny1

Оценка CVSS
Балл7.5 — высокая опасность
Источники и патчи
http://www.debian.org/security/dsa-1985/http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4565
Проверьте безопасность своего сайта и почты → Полная проверка домена