----------------------------------------------------------------------

To improve our services to our customers, we have made a number of
additions to the Secunia Advisories and have started translating the
advisories to German.

The improvements will help our customers to get a better
understanding of how we reached our conclusions, how it was rated,
our thoughts on exploitation, attack vectors, and scenarios.

This includes:
* Reason for rating
* Extended description
* Extended solution
* Exploit code or links to exploit code
* Deep links

Read the full description:
http://corporate.secunia.com/products/48/?r=l

Contact Secunia Sales for more information:
http://corporate.secunia.com/how_to_buy/15/?r=l

----------------------------------------------------------------------

TITLE:
Mandriva update for mozilla-thunderbird

SECUNIA ADVISORY ID:
SA22815

VERIFY ADVISORY:
http://secunia.com/advisories/22815/

CRITICAL:
Moderately critical

IMPACT:
Security Bypass, Cross Site Scripting, DoS, System access

WHERE:
>From remote

OPERATING SYSTEM:
Mandriva Linux 2007
http://secunia.com/product/12165/

DESCRIPTION:
Mandriva has issued an update for mozilla-thunderbird. This fixes
some vulnerabilities, which can be exploited by malicious people to
bypass certain security restrictions, conduct cross-site scripting
attacks, and potentially compromise a vulnerable system.

For more information:
SA22770

SOLUTION:
Apply updated packages.

Mandriva Linux 2007

488e65dfe45ecf7e3a9e1a3dedd5c2ce
2007.0/i586/mozilla-thunderbird-1.5.0.8-1.1mdv2007.0.i586.rpm
5e551ab45061148722dda1d7ce66959e
2007.0/i586/mozilla-thunderbird-bg-1.5.0.8-1.1mdv2007.0.i586.rpm
2149a7fd629b8bc6843c6fdf1bb49efb
2007.0/i586/mozilla-thunderbird-ca-1.5.0.8-1.1mdv2007.0.i586.rpm
0d2315b490e3b8dd2ab791bd6c3ee516
2007.0/i586/mozilla-thunderbird-cs-1.5.0.8-1.1mdv2007.0.i586.rpm
d5583d1b99b948c90e1cad62d753d67d
2007.0/i586/mozilla-thunderbird-da-1.5.0.8-1.1mdv2007.0.i586.rpm
00ec607c39d3de4c589997d6c7ee6679
2007.0/i586/mozilla-thunderbird-de-1.5.0.8-1.1mdv2007.0.i586.rpm
6d1f0f2576362a0bb90b4f9d8c4f2153
2007.0/i586/mozilla-thunderbird-devel-1.5.0.8-1.1mdv2007.0.i586.rpm
2cb0e44d2e3f7fddd60249843204403f
2007.0/i586/mozilla-thunderbird-el-1.5.0.8-1.1mdv2007.0.i586.rpm
0c3c771882698d5651775aeed24bfd73
2007.0/i586/mozilla-thunderbird-enigmail-1.5.0.8-1.1mdv2007.0.i586.rpm
477ca905391c1d555d0136d46d557869
2007.0/i586/mozilla-thunderbird-enigmail-ca-1.5.0.8-1.1mdv2007.0.i586.rpm
741811dd392d942b27e1b3b0de695d4e
2007.0/i586/mozilla-thunderbird-enigmail-cs-1.5.0.8-1.1mdv2007.0.i586.rpm
7c2c4922c6a2c6ce2cb6108a95f7dbfa
2007.0/i586/mozilla-thunderbird-enigmail-de-1.5.0.8-1.1mdv2007.0.i586.rpm
7cbf9f3218d587ef97edf01f2298096b
2007.0/i586/mozilla-thunderbird-enigmail-el-1.5.0.8-1.1mdv2007.0.i586.rpm
7dbd9e4c16db82a761a7b502c1f7f22d
2007.0/i586/mozilla-thunderbird-enigmail-es-1.5.0.8-1.1mdv2007.0.i586.rpm
b6dd6119216f6b748ee7c1570c3b8c37
2007.0/i586/mozilla-thunderbird-enigmail-es_AR-1.5.0.8-1.1mdv2007.0.i586.rpm
1eea732e08ca0ef96796c3f50abb1f77
2007.0/i586/mozilla-thunderbird-enigmail-fi-1.5.0.8-1.1mdv2007.0.i586.rpm
e1cc5cf2496581d776bb43e2f0dbbea6
2007.0/i586/mozilla-thunderbird-enigmail-fr-1.5.0.8-1.1mdv2007.0.i586.rpm
af86ce82ff9053250f82f2215c8dd7e5
2007.0/i586/mozilla-thunderbird-enigmail-hu-1.5.0.8-1.1mdv2007.0.i586.rpm
6319633c561c7f68c6614685126da02b
2007.0/i586/mozilla-thunderbird-enigmail-it-1.5.0.8-1.1mdv2007.0.i586.rpm
56387829c6cc83882246e68e3b8704b0
2007.0/i586/mozilla-thunderbird-enigmail-ja-1.5.0.8-1.1mdv2007.0.i586.rpm
56cb838bb0c375f53d3cff2eb76a1118
2007.0/i586/mozilla-thunderbird-enigmail-nb-1.5.0.8-1.1mdv2007.0.i586.rpm
253500598ff56ab85394e68708ace21d
2007.0/i586/mozilla-thunderbird-enigmail-nl-1.5.0.8-1.1mdv2007.0.i586.rpm
53b4d4f1aa4e8174a33a0ed436ce961a
2007.0/i586/mozilla-thunderbird-enigmail-pl-1.5.0.8-1.1mdv2007.0.i586.rpm
fb9dd6933d27029538cd01a64ec55cee
2007.0/i586/mozilla-thunderbird-enigmail-pt-1.5.0.8-1.1mdv2007.0.i586.rpm
701b9837303a3ed79e6c74c037c28926
2007.0/i586/mozilla-thunderbird-enigmail-pt_BR-1.5.0.8-1.1mdv2007.0.i586.rpm
b3739c1344770e92864c50f131f08884
2007.0/i586/mozilla-thunderbird-enigmail-ru-1.5.0.8-1.1mdv2007.0.i586.rpm
1efe7ebc2a71e2f2d6c2785026a6e7ac
2007.0/i586/mozilla-thunderbird-enigmail-sk-1.5.0.8-1.1mdv2007.0.i586.rpm
6860352b37999652aab785a266673e2f
2007.0/i586/mozilla-thunderbird-enigmail-sl-1.5.0.8-1.1mdv2007.0.i586.rpm
51abe323b14793097935b0c221e64f71
2007.0/i586/mozilla-thunderbird-enigmail-sv-1.5.0.8-1.1mdv2007.0.i586.rpm
b8ec884437a460c9fbb5c71db6a46c31
2007.0/i586/mozilla-thunderbird-enigmail-zh_CN-1.5.0.8-1.1mdv2007.0.i586.rpm
9ae4fb1871ee29f3f7b52210c0cf4e1b
2007.0/i586/mozilla-thunderbird-es-1.5.0.8-1.1mdv2007.0.i586.rpm
e1a31b03ffef8e86df09579296fce3c9
2007.0/i586/mozilla-thunderbird-es_AR-1.5.0.8-1.1mdv2007.0.i586.rpm
6b4bdbb4648231b128655e56015621c7
2007.0/i586/mozilla-thunderbird-eu-1.5.0.8-1.1mdv2007.0.i586.rpm
d333252ee1ba51351762e4050565ecb1
2007.0/i586/mozilla-thunderbird-fi-1.5.0.8-1.1mdv2007.0.i586.rpm
0a2828dbab70a2be0e721cc016f93d7f
2007.0/i586/mozilla-thunderbird-fr-1.5.0.8-1.1mdv2007.0.i586.rpm
defa2ac291c66f693946362bd2501c40
2007.0/i586/mozilla-thunderbird-ga-1.5.0.8-1.1mdv2007.0.i586.rpm
c5540aa8289eefbf3e708e442de77aa8
2007.0/i586/mozilla-thunderbird-gu_IN-1.5.0.8-1.1mdv2007.0.i586.rpm
45da9968c4661ef994ef1dcefd0ad54f
2007.0/i586/mozilla-thunderbird-he-1.5.0.8-1.1mdv2007.0.i586.rpm
df8d2ea1013a65457aa1f2100060d968
2007.0/i586/mozilla-thunderbird-hu-1.5.0.8-1.1mdv2007.0.i586.rpm
f87f2441b2ca36d4f5c3f3f2dd04b3bb
2007.0/i586/mozilla-thunderbird-it-1.5.0.8-1.1mdv2007.0.i586.rpm
bc3a281fbc5c09b7f962dfb1d3b9e517
2007.0/i586/mozilla-thunderbird-ja-1.5.0.8-1.1mdv2007.0.i586.rpm
2563050985477697472069d08e96de0f
2007.0/i586/mozilla-thunderbird-ko-1.5.0.8-1.1mdv2007.0.i586.rpm
e22be985ae58ab3eba5b90aa6a3eb58e
2007.0/i586/mozilla-thunderbird-lt-1.5.0.8-1.1mdv2007.0.i586.rpm
fde0d1b9c4feee3c1e239345f4065090
2007.0/i586/mozilla-thunderbird-mk-1.5.0.8-1.1mdv2007.0.i586.rpm
10be2386887a6c70bc4f9c0453b33072
2007.0/i586/mozilla-thunderbird-nb-1.5.0.8-1.1mdv2007.0.i586.rpm
1c92d5ee79fc52ec1525f3c96dfa1916
2007.0/i586/mozilla-thunderbird-nl-1.5.0.8-1.1mdv2007.0.i586.rpm
42e6ddb4a33a297c71b996bf651a4d69
2007.0/i586/mozilla-thunderbird-pa_IN-1.5.0.8-1.1mdv2007.0.i586.rpm
96394d1245284a886b954bb063c0ab5b
2007.0/i586/mozilla-thunderbird-pl-1.5.0.8-1.1mdv2007.0.i586.rpm
8386317130e064260bd8b114616410ed
2007.0/i586/mozilla-thunderbird-pt_BR-1.5.0.8-1.1mdv2007.0.i586.rpm
eb622e8adc0767e090a608e80a1611b7
2007.0/i586/mozilla-thunderbird-ru-1.5.0.8-1.1mdv2007.0.i586.rpm
3ca6736aaf725851a0be21f0490aeb20
2007.0/i586/mozilla-thunderbird-sk-1.5.0.8-1.1mdv2007.0.i586.rpm
47b16b8c45acc936b62051594ed87c69
2007.0/i586/mozilla-thunderbird-sl-1.5.0.8-1.1mdv2007.0.i586.rpm
c2e742162882c52761040025ff4ddfff
2007.0/i586/mozilla-thunderbird-sv-1.5.0.8-1.1mdv2007.0.i586.rpm
072c5224bd49a45ba7ab0a57f657ec6e
2007.0/i586/mozilla-thunderbird-tr-1.5.0.8-1.1mdv2007.0.i586.rpm
3393e810730d305adc4fe8ecc98b782a
2007.0/i586/mozilla-thunderbird-zh_CN-1.5.0.8-1.1mdv2007.0.i586.rpm
70882501b0fc01a56cee67c2b7c63ac5
2007.0/i586/nsinstall-1.5.0.8-1.1mdv2007.0.i586.rpm
e408368ca02e7efbbece9adbaaea7d56
2007.0/SRPMS/mozilla-thunderbird-1.5.0.8-1.1mdv2007.0.src.rpm
7867a124b85e4a8098ec7b814267c1f5
2007.0/SRPMS/mozilla-thunderbird-enigmail-l10n-1.5.0.8-1.1mdv2007.0.src.rpm
e776e0c4c5a6ff592af0c346bf8b4511
2007.0/SRPMS/mozilla-thunderbird-l10n-1.5.0.8-1.1mdv2007.0.src.rpm

Mandriva Linux 2007/X86_64

47aa8c7af46ee44f1b51e0f44772beeb
2007.0/x86_64/mozilla-thunderbird-1.5.0.8-1.1mdv2007.0.x86_64.rpm
e284b46733e04ab96cccb612de04e5a8
2007.0/x86_64/mozilla-thunderbird-bg-1.5.0.8-1.1mdv2007.0.x86_64.rpm
e73efd093c48aa82d6f73025f1ade443
2007.0/x86_64/mozilla-thunderbird-ca-1.5.0.8-1.1mdv2007.0.x86_64.rpm
ed790bdd1a45343b427925765f5f2b5c
2007.0/x86_64/mozilla-thunderbird-cs-1.5.0.8-1.1mdv2007.0.x86_64.rpm
61690a97ef04b6083693ffe4a9ab3176
2007.0/x86_64/mozilla-thunderbird-da-1.5.0.8-1.1mdv2007.0.x86_64.rpm
889574eda89385739aad6eda7f3d2604
2007.0/x86_64/mozilla-thunderbird-de-1.5.0.8-1.1mdv2007.0.x86_64.rpm
ef9b59cdd619da74737b5e91e4067386
2007.0/x86_64/mozilla-thunderbird-devel-1.5.0.8-1.1mdv2007.0.x86_64.rpm
e20a88ece32f8ee81aaedd828558d880
2007.0/x86_64/mozilla-thunderbird-el-1.5.0.8-1.1mdv2007.0.x86_64.rpm
250f6f86984922da278774d480ba37a7
2007.0/x86_64/mozilla-thunderbird-enigmail-1.5.0.8-1.1mdv2007.0.x86_64.rpm
f683dba38c9055cbac36f8468e357ebf
2007.0/x86_64/mozilla-thunderbird-enigmail-ca-1.5.0.8-1.1mdv2007.0.x86_64.rpm
6594d0bb3f7770f168728827c1cf9f83
2007.0/x86_64/mozilla-thunderbird-enigmail-cs-1.5.0.8-1.1mdv2007.0.x86_64.rpm
1ee011c3c94c7b081f53b9a55996da0c
2007.0/x86_64/mozilla-thunderbird-enigmail-de-1.5.0.8-1.1mdv2007.0.x86_64.rpm
be24dd32e628b8294c1b87d200cf02dd
2007.0/x86_64/mozilla-thunderbird-enigmail-el-1.5.0.8-1.1mdv2007.0.x86_64.rpm
020acf8e510080a701c6278c6eb862ae
2007.0/x86_64/mozilla-thunderbird-enigmail-es-1.5.0.8-1.1mdv2007.0.x86_64.rpm
af4c92e4f3eaf833111572ead14c8c04
2007.0/x86_64/mozilla-thunderbird-enigmail-es_AR-1.5.0.8-1.1mdv2007.0.x86_64.rpm
7483c3a55198fcbc9be2c9750919a370
2007.0/x86_64/mozilla-thunderbird-enigmail-fi-1.5.0.8-1.1mdv2007.0.x86_64.rpm
753acdb58e6400659dab48ff78f371e7
2007.0/x86_64/mozilla-thunderbird-enigmail-fr-1.5.0.8-1.1mdv2007.0.x86_64.rpm
fb83f542bd12edda5e85d9873a08a938
2007.0/x86_64/mozilla-thunderbird-enigmail-hu-1.5.0.8-1.1mdv2007.0.x86_64.rpm
996bbfb13654cfc2180036ea6b1e61df
2007.0/x86_64/mozilla-thunderbird-enigmail-it-1.5.0.8-1.1mdv2007.0.x86_64.rpm
ff6217b99ab96a1444b6a758bf184ecf
2007.0/x86_64/mozilla-thunderbird-enigmail-ja-1.5.0.8-1.1mdv2007.0.x86_64.rpm
f15d9f053011068deba71fdc05dc6d46
2007.0/x86_64/mozilla-thunderbird-enigmail-nb-1.5.0.8-1.1mdv2007.0.x86_64.rpm
98f63b0dedef781ec16f8bebb6a032cb
2007.0/x86_64/mozilla-thunderbird-enigmail-nl-1.5.0.8-1.1mdv2007.0.x86_64.rpm
e5e42bb849d26a4f59fb6204d6ed9850
2007.0/x86_64/mozilla-thunderbird-enigmail-pl-1.5.0.8-1.1mdv2007.0.x86_64.rpm
8bc9d56d4778baf40b115eb805a506b3
2007.0/x86_64/mozilla-thunderbird-enigmail-pt-1.5.0.8-1.1mdv2007.0.x86_64.rpm
21c7d7ffd14a724e4ce9d96e99d0f3c7
2007.0/x86_64/mozilla-thunderbird-enigmail-pt_BR-1.5.0.8-1.1mdv2007.0.x86_64.rpm
9b115831c8ae36d7141c93a9d867d445
2007.0/x86_64/mozilla-thunderbird-enigmail-ru-1.5.0.8-1.1mdv2007.0.x86_64.rpm
d6efb3cdaba13c17dd31147011796614
2007.0/x86_64/mozilla-thunderbird-enigmail-sk-1.5.0.8-1.1mdv2007.0.x86_64.rpm
4239765036a0bffaa4fcff9fb076a221
2007.0/x86_64/mozilla-thunderbird-enigmail-sl-1.5.0.8-1.1mdv2007.0.x86_64.rpm
be87cc456600cb0dc18730ae3f75af92
2007.0/x86_64/mozilla-thunderbird-enigmail-sv-1.5.0.8-1.1mdv2007.0.x86_64.rpm
459367e42865a1de4374d2a9b8c36232
2007.0/x86_64/mozilla-thunderbird-enigmail-zh_CN-1.5.0.8-1.1mdv2007.0.x86_64.rpm
1e1b30720806b2c6ab650251f9756127
2007.0/x86_64/mozilla-thunderbird-es-1.5.0.8-1.1mdv2007.0.x86_64.rpm
70c5525bea63d291374706abfb4523c4
2007.0/x86_64/mozilla-thunderbird-es_AR-1.5.0.8-1.1mdv2007.0.x86_64.rpm
4addf81f6fdb0fe55d2274ba726d066e
2007.0/x86_64/mozilla-thunderbird-eu-1.5.0.8-1.1mdv2007.0.x86_64.rpm
9c9a1e6a7623a712f40666e77fd3f2b4
2007.0/x86_64/mozilla-thunderbird-fi-1.5.0.8-1.1mdv2007.0.x86_64.rpm
9cd9d0509bbe4d0bc7c092118253c237
2007.0/x86_64/mozilla-thunderbird-fr-1.5.0.8-1.1mdv2007.0.x86_64.rpm
b23236fc11caa38b1354893f1e9863e1
2007.0/x86_64/mozilla-thunderbird-ga-1.5.0.8-1.1mdv2007.0.x86_64.rpm
c5b898d7f04c26a34bb4223ee4547586
2007.0/x86_64/mozilla-thunderbird-gu_IN-1.5.0.8-1.1mdv2007.0.x86_64.rpm
8e114fec014131d472790035a1509783
2007.0/x86_64/mozilla-thunderbird-he-1.5.0.8-1.1mdv2007.0.x86_64.rpm
3eda3b36a83c550a1f52faf6adfb0b10
2007.0/x86_64/mozilla-thunderbird-hu-1.5.0.8-1.1mdv2007.0.x86_64.rpm
c336cc525567465d1649ee55c604d3a3
2007.0/x86_64/mozilla-thunderbird-it-1.5.0.8-1.1mdv2007.0.x86_64.rpm
476f974ea2e3b9ef971231b8b08e62f0
2007.0/x86_64/mozilla-thunderbird-ja-1.5.0.8-1.1mdv2007.0.x86_64.rpm
7878332de8134b9025b924315d6ffbf6
2007.0/x86_64/mozilla-thunderbird-ko-1.5.0.8-1.1mdv2007.0.x86_64.rpm
7602f9099c26d60e934f54918dd38e46
2007.0/x86_64/mozilla-thunderbird-lt-1.5.0.8-1.1mdv2007.0.x86_64.rpm
52ba4b91175db4376fd4c4e9018969c3
2007.0/x86_64/mozilla-thunderbird-mk-1.5.0.8-1.1mdv2007.0.x86_64.rpm
1e2bc31ee83c5c47f06953aba976a27d
2007.0/x86_64/mozilla-thunderbird-nb-1.5.0.8-1.1mdv2007.0.x86_64.rpm
47b180beb65802e89f7e6a8be7f33d15
2007.0/x86_64/mozilla-thunderbird-nl-1.5.0.8-1.1mdv2007.0.x86_64.rpm
6485a71b5d07fef3e337630aa53bb4c6
2007.0/x86_64/mozilla-thunderbird-pa_IN-1.5.0.8-1.1mdv2007.0.x86_64.rpm
6b5df9cad533fc75fc47191df5f3dabf
2007.0/x86_64/mozilla-thunderbird-pl-1.5.0.8-1.1mdv2007.0.x86_64.rpm
99b61d660a72eff639f78ec0422aeaf2
2007.0/x86_64/mozilla-thunderbird-pt_BR-1.5.0.8-1.1mdv2007.0.x86_64.rpm
99cfe247978fe85b5b5186bf12247f3a
2007.0/x86_64/mozilla-thunderbird-ru-1.5.0.8-1.1mdv2007.0.x86_64.rpm
8c393629997cea717c2f1e8d077a9344
2007.0/x86_64/mozilla-thunderbird-sk-1.5.0.8-1.1mdv2007.0.x86_64.rpm
be518e4b4833e6cb9d083871101be35b
2007.0/x86_64/mozilla-thunderbird-sl-1.5.0.8-1.1mdv2007.0.x86_64.rpm
8dedff0ffd0e7b7721b256f01821f188
2007.0/x86_64/mozilla-thunderbird-sv-1.5.0.8-1.1mdv2007.0.x86_64.rpm
05202d61506a60981fb9a317ce6a5d5d
2007.0/x86_64/mozilla-thunderbird-tr-1.5.0.8-1.1mdv2007.0.x86_64.rpm
0deda88ec857fb0c11b57555814a20ec
2007.0/x86_64/mozilla-thunderbird-zh_CN-1.5.0.8-1.1mdv2007.0.x86_64.rpm
0f2f7928b2edfbe0ae5faf127b0ed066
2007.0/x86_64/nsinstall-1.5.0.8-1.1mdv2007.0.x86_64.rpm
e408368ca02e7efbbece9adbaaea7d56
2007.0/SRPMS/mozilla-thunderbird-1.5.0.8-1.1mdv2007.0.src.rpm
7867a124b85e4a8098ec7b814267c1f5
2007.0/SRPMS/mozilla-thunderbird-enigmail-l10n-1.5.0.8-1.1mdv2007.0.src.rpm
e776e0c4c5a6ff592af0c346bf8b4511
2007.0/SRPMS/mozilla-thunderbird-l10n-1.5.0.8-1.1mdv2007.0.src.rpm

ORIGINAL ADVISORY:
http://www.mandriva.com/security/advisories?name=MDKSA-2006:206

OTHER REFERENCES:
SA22770:
http://secunia.com/advisories/22770/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------