USN-845-1: Pan vulnerability

Releases

• Ubuntu 8.04

Packages

• pan -

Details

Pavel Polischouk discovered that Pan incorrectly handled certain data
structures. If a user were tricked into viewing malicious nntp data, a
remote attacker could cause a denial of service or possibly execute
arbitrary code with the privileges of the user invoking the program.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 8.04

• pan - 0.132-2ubuntu2.1

In general, a standard system upgrade is sufficient to effect the
necessary changes.

References

• CVE-2008-2363