FYI…

- http://isc.sans.org/diary.php?date=2005-05-26
Updated May 26th 2005 22:53 UTC
"A serous vulnerability was released today by NGS Software that affects the L-Soft LISTSERV mailing list software. If you run this software, you are highly recommended to update to the latest version:

http://www.lsoft.com/news/securityadvisory2005-05.asp
"PRODUCTS AFFECTED:
* LISTSERV version 14.3 (confirmed), including LISTSERV Lite and HPO.
* LISTSERV version 1.8e (confirmed), including LISTSERV Lite and HPO.
* LISTSERV version 1.8d (inferred), including LISTSERV Lite and HPO.
* Older versions are not believed to be affected.
* LISTSERV Free Edition is LISTSERV Lite with special licensing terms. What applies to LISTSERV Lite in this advisory applies also to LISTSERV Free Edition.
* Support for version 1.8e (released May 22, 2002) was discontinued December 31, 2004. No patches are available for version 1.8e or older.
OPERATING SYSTEMS AFFECTED:
* Windows, unix (all vendors), OpenVMS AXP (confirmed).
* VM sites are not affected…"

http://www.securityfocus.com/archive/1/398…23/2005-05-29/0

>>> The kits can be found at:
http://www.lsoft.com/download/listserv.asp

http://www.lsoft.com/download/listservlite.asp

:ph34r: