|
Family: Debian Local Security Checks --> Category: infos
[DSA889] DSA-889-1 enigmail Vulnerability Scan
Vulnerability Scan Summary DSA-889-1 enigmail
Detailed Explanation for this Vulnerability Test
Hadmut Danish discovered a bug in enigmail, GPG support for Mozilla
MailNews and Mozilla Thunderbird, that can lead to the encryption of
mail with the wrong public key, hence, potential disclosure of
confidential data to others.
The old stable distribution (woody) does not contain enigmail packages.
For the stable distribution (sarge) this problem has been fixed in
version 0.91-4sarge2.
For the unstable distribution (sid) this problem has been fixed in
version 0.93-1.
We recommend that you upgrade your enigmail packages.
Solution : http://www.debian.org/security/2005/dsa-889
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|