Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: firstname.lastname@example.org
This host is running a web server and the 'mailnews' CGI is installed. This CGI contains a flaw that allows an attacker to execute arbitrary commands on this host. An attacker can use this to gain access to this host.
Please remove the 'mailnews' script from the CGI- BIN directory on this host.