bugtraq-help@securityfocus.com
10/07/08, 15:45
Hi! This is the ezmlm program. I'm managing the
bugtraq@securityfocus.com mailing list.
I'm working for my owner, who can be reached
at bugtraq-owner@securityfocus.com.
Messages to you from the bugtraq mailing list seem to
have been bouncing. I've attached a copy of the first bounce
message I received.
If this message bounces too, I will send you a probe. If the probe bounces,
I will remove your address from the bugtraq mailing list,
without further notice.
I've kept a list of which messages from the bugtraq mailing list have
bounced from your address.
Copies of these messages may be in the archive.
To retrieve a set of messages 123-145 (a maximum of 100 per request),
send an empty message to:
<bugtraq-get.123_145@securityfocus.com>
To receive a subject and author list for the last 100 or so messages,
send an empty message to:
<bugtraq-index@securityfocus.com>
Here are the message numbers:
37331
37333
37334
37335
37340
37337
37339
37341
--- Enclosed is a copy of the bounce message I received.
Return-Path: <>
Received: (qmail 27811 invoked from network); 28 Jun 2008 19:06:39 -0000
Received: from mail.securityfocus.com (205.206.231.9)
by lists2.securityfocus.com with SMTP; 28 Jun 2008 19:06:39 -0000
Received: (qmail 4606 invoked by alias); 28 Jun 2008 20:06:56 -0000
Received: (qmail 4014 invoked from network); 28 Jun 2008 20:06:34 -0000
Received: from outgoing.securityfocus.com (HELO outgoing2.securityfocus.com) (205.206.231.26)
by mail.securityfocus.com with SMTP; 28 Jun 2008 20:06:34 -0000
Received: by outgoing2.securityfocus.com (Postfix)
id 76C3E143A1E; Sat, 28 Jun 2008 13:09:25 -0600 (MDT)
Date: Sat, 28 Jun 2008 13:09:25 -0600 (MDT)
From: MAILER-DAEMON@securityfocus.com (Mail Delivery System)
Subject: Undelivered Mail Returned to Sender
To: bugtraq-return-37331-bugtraq=freebsd.csie.nctu.edu.tw@securityfocus.com
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="738A61438D1.1214680155/outgoing2.securityfocus.com"
Message-Id: <20080628190925.76C3E143A1E@outgoing2.securityfocus .com>
This is a MIME-encapsulated message.
--738A61438D1.1214680155/outgoing2.securityfocus.com
Content-Description: Notification
Content-Type: text/plain
This is the Postfix program at host outgoing2.securityfocus.com.
I'm sorry to have to inform you that your message could not be
be delivered to one or more recipients. It's attached below.
For further assistance, please send mail to <postmaster>
If you do so, please include this problem report. You can
delete your own text from the attached returned message.
The Postfix program
<bugtraq@freebsd.csie.nctu.edu.tw>: host mx1.csie.nctu.edu.tw[140.113.17.201]
refused to talk to me: 421 4.4.1 cacy-fpe-srv-1.symantec.com Unable to
contact destination
--738A61438D1.1214680155/outgoing2.securityfocus.com
Content-Description: Delivery report
Content-Type: message/delivery-status
Reporting-MTA: dns; outgoing2.securityfocus.com
X-Postfix-Queue-ID: 738A61438D1
X-Postfix-Sender: rfc822; bugtraq-return-37331@securityfocus.com
Arrival-Date: Thu, 26 Jun 2008 10:51:26 -0600 (MDT)
Final-Recipient: rfc822; bugtraq@freebsd.csie.nctu.edu.tw
Action: failed
Status: 4.0.0
Diagnostic-Code: X-Postfix; host mx1.csie.nctu.edu.tw[140.113.17.201] refused
to talk to me: 421 4.4.1 cacy-fpe-srv-1.symantec.com Unable to contact
destination
--738A61438D1.1214680155/outgoing2.securityfocus.com
Content-Description: Undelivered Message
Content-Type: message/rfc822
Received: from lists2.securityfocus.com (lists2.securityfocus.com [205.206.231.20])
by outgoing2.securityfocus.com (Postfix) with QMQP
id 738A61438D1; Thu, 26 Jun 2008 10:51:26 -0600 (MDT)
Mailing-List: contact bugtraq-help@securityfocus.com; run by ezmlm
Precedence: bulk
List-Id: <bugtraq.list-id.securityfocus.com>
List-Post: <mailto:bugtraq@securityfocus.com>
List-Help: <mailto:bugtraq-help@securityfocus.com>
List-Unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
List-Subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
Delivered-To: mailing list bugtraq@securityfocus.com
Delivered-To: moderator for bugtraq@securityfocus.com
Received: (qmail 30903 invoked from network); 26 Jun 2008 15:56:39 -0000
X-Authentication-Warning: logo.rdu.rpath.com: jmforbes set sender to rPath Update Announcements <announce-noreply@rpath.com> using -r
Date: Thu, 26 Jun 2008 13:18:39 -0400
From: rPath Update Announcements <announce-noreply@rpath.com>
To: product-announce@lists.rpath.com,
product-announce@lists.rpath.com, security-announce@lists.rpath.com,
update-announce@lists.rpath.com, security-announce@lists.rpath.com,
update-announce@lists.rpath.com
Cc: full-disclosure@lists.grok.org.uk, vulnwatch@vulnwatch.org,
bugtraq@securityfocus.com, lwn@lwn.net,
full-disclosure@lists.grok.org.uk, vulnwatch@vulnwatch.org,
bugtraq@securityfocus.com, lwn@lwn.net
Subject: rPSA-2008-0206-1 ruby
Message-ID: <4863cf6f.5k7cW/Gd8BUqHh4O%announce-noreply@rpath.com>
User-Agent: nail 11.22 3/20/05
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
rPath Security Advisory: 2008-0206-1
Published: 2008-06-26
Products:
rPath Appliance Platform Linux Service 1
rPath Appliance Platform Linux Service 2
rPath Linux 1
rPath Linux 2
Rating: Severe
Exposure Level Classification:
Remote User Deterministic Privilege Escalation
Updated Versions:
ruby=conary.rpath.com@rpl:1/1.8.6_p230-0.3-1
ruby=conary.rpath.com@rpl:2/1.8.6_p230-2-0.1
rPath Issue Tracking System:
https://issues.rpath.com/browse/RPL-2626
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2662
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2663
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2725
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2726
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2664
http://preview.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities
Description:
Previous versions of the ruby package contain multiple vulnerabilities,
the most serious of which allow users to execute arbitrary code with
elevated privileges.
http://wiki.rpath.com/Advisories:rPSA-2008-0206
Copyright 2008 rPath, Inc.
This file is distributed under the terms of the MIT License.
A copy is available at http://www.rpath.com/permanent/mit-license.html
--738A61438D1.1214680155/outgoing2.securityfocus.com--
bugtraq@securityfocus.com mailing list.
I'm working for my owner, who can be reached
at bugtraq-owner@securityfocus.com.
Messages to you from the bugtraq mailing list seem to
have been bouncing. I've attached a copy of the first bounce
message I received.
If this message bounces too, I will send you a probe. If the probe bounces,
I will remove your address from the bugtraq mailing list,
without further notice.
I've kept a list of which messages from the bugtraq mailing list have
bounced from your address.
Copies of these messages may be in the archive.
To retrieve a set of messages 123-145 (a maximum of 100 per request),
send an empty message to:
<bugtraq-get.123_145@securityfocus.com>
To receive a subject and author list for the last 100 or so messages,
send an empty message to:
<bugtraq-index@securityfocus.com>
Here are the message numbers:
37331
37333
37334
37335
37340
37337
37339
37341
--- Enclosed is a copy of the bounce message I received.
Return-Path: <>
Received: (qmail 27811 invoked from network); 28 Jun 2008 19:06:39 -0000
Received: from mail.securityfocus.com (205.206.231.9)
by lists2.securityfocus.com with SMTP; 28 Jun 2008 19:06:39 -0000
Received: (qmail 4606 invoked by alias); 28 Jun 2008 20:06:56 -0000
Received: (qmail 4014 invoked from network); 28 Jun 2008 20:06:34 -0000
Received: from outgoing.securityfocus.com (HELO outgoing2.securityfocus.com) (205.206.231.26)
by mail.securityfocus.com with SMTP; 28 Jun 2008 20:06:34 -0000
Received: by outgoing2.securityfocus.com (Postfix)
id 76C3E143A1E; Sat, 28 Jun 2008 13:09:25 -0600 (MDT)
Date: Sat, 28 Jun 2008 13:09:25 -0600 (MDT)
From: MAILER-DAEMON@securityfocus.com (Mail Delivery System)
Subject: Undelivered Mail Returned to Sender
To: bugtraq-return-37331-bugtraq=freebsd.csie.nctu.edu.tw@securityfocus.com
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="738A61438D1.1214680155/outgoing2.securityfocus.com"
Message-Id: <20080628190925.76C3E143A1E@outgoing2.securityfocus .com>
This is a MIME-encapsulated message.
--738A61438D1.1214680155/outgoing2.securityfocus.com
Content-Description: Notification
Content-Type: text/plain
This is the Postfix program at host outgoing2.securityfocus.com.
I'm sorry to have to inform you that your message could not be
be delivered to one or more recipients. It's attached below.
For further assistance, please send mail to <postmaster>
If you do so, please include this problem report. You can
delete your own text from the attached returned message.
The Postfix program
<bugtraq@freebsd.csie.nctu.edu.tw>: host mx1.csie.nctu.edu.tw[140.113.17.201]
refused to talk to me: 421 4.4.1 cacy-fpe-srv-1.symantec.com Unable to
contact destination
--738A61438D1.1214680155/outgoing2.securityfocus.com
Content-Description: Delivery report
Content-Type: message/delivery-status
Reporting-MTA: dns; outgoing2.securityfocus.com
X-Postfix-Queue-ID: 738A61438D1
X-Postfix-Sender: rfc822; bugtraq-return-37331@securityfocus.com
Arrival-Date: Thu, 26 Jun 2008 10:51:26 -0600 (MDT)
Final-Recipient: rfc822; bugtraq@freebsd.csie.nctu.edu.tw
Action: failed
Status: 4.0.0
Diagnostic-Code: X-Postfix; host mx1.csie.nctu.edu.tw[140.113.17.201] refused
to talk to me: 421 4.4.1 cacy-fpe-srv-1.symantec.com Unable to contact
destination
--738A61438D1.1214680155/outgoing2.securityfocus.com
Content-Description: Undelivered Message
Content-Type: message/rfc822
Received: from lists2.securityfocus.com (lists2.securityfocus.com [205.206.231.20])
by outgoing2.securityfocus.com (Postfix) with QMQP
id 738A61438D1; Thu, 26 Jun 2008 10:51:26 -0600 (MDT)
Mailing-List: contact bugtraq-help@securityfocus.com; run by ezmlm
Precedence: bulk
List-Id: <bugtraq.list-id.securityfocus.com>
List-Post: <mailto:bugtraq@securityfocus.com>
List-Help: <mailto:bugtraq-help@securityfocus.com>
List-Unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
List-Subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
Delivered-To: mailing list bugtraq@securityfocus.com
Delivered-To: moderator for bugtraq@securityfocus.com
Received: (qmail 30903 invoked from network); 26 Jun 2008 15:56:39 -0000
X-Authentication-Warning: logo.rdu.rpath.com: jmforbes set sender to rPath Update Announcements <announce-noreply@rpath.com> using -r
Date: Thu, 26 Jun 2008 13:18:39 -0400
From: rPath Update Announcements <announce-noreply@rpath.com>
To: product-announce@lists.rpath.com,
product-announce@lists.rpath.com, security-announce@lists.rpath.com,
update-announce@lists.rpath.com, security-announce@lists.rpath.com,
update-announce@lists.rpath.com
Cc: full-disclosure@lists.grok.org.uk, vulnwatch@vulnwatch.org,
bugtraq@securityfocus.com, lwn@lwn.net,
full-disclosure@lists.grok.org.uk, vulnwatch@vulnwatch.org,
bugtraq@securityfocus.com, lwn@lwn.net
Subject: rPSA-2008-0206-1 ruby
Message-ID: <4863cf6f.5k7cW/Gd8BUqHh4O%announce-noreply@rpath.com>
User-Agent: nail 11.22 3/20/05
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
rPath Security Advisory: 2008-0206-1
Published: 2008-06-26
Products:
rPath Appliance Platform Linux Service 1
rPath Appliance Platform Linux Service 2
rPath Linux 1
rPath Linux 2
Rating: Severe
Exposure Level Classification:
Remote User Deterministic Privilege Escalation
Updated Versions:
ruby=conary.rpath.com@rpl:1/1.8.6_p230-0.3-1
ruby=conary.rpath.com@rpl:2/1.8.6_p230-2-0.1
rPath Issue Tracking System:
https://issues.rpath.com/browse/RPL-2626
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2662
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2663
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2725
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2726
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2664
http://preview.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities
Description:
Previous versions of the ruby package contain multiple vulnerabilities,
the most serious of which allow users to execute arbitrary code with
elevated privileges.
http://wiki.rpath.com/Advisories:rPSA-2008-0206
Copyright 2008 rPath, Inc.
This file is distributed under the terms of the MIT License.
A copy is available at http://www.rpath.com/permanent/mit-license.html
--738A61438D1.1214680155/outgoing2.securityfocus.com--