Slackware Linux Advisory: nfs-utilsJul 15, 2003, 03:59 (3 Talkback[s])
[slackware-security] nfs-utils off-by-one overflow fixed (SSA:2003-195-01)
New nfs-utils packages are available for Slackware 8.1, 9.0, and -current to fix an off-by-one buffer overflow in xlog.c. Thanks to Janusz Niewiadomski for discovering and reporting this problem.
The CVE (Common Vulnerabilities and Exposures) Project has assigned the identification number CAN-2003-0252 to this issue.
Here are the details from the Slackware 9.0 ChangeLog:
Updated package for Slackware 8.1:
Updated package for Slackware 9.0:
Updated package for Slackware -current:
Slackware 8.1 package:
Slackware 9.0 package:
Slackware -current package:
First, if the NFS server is running, stop it: . /etc/rc.d/rc.nfsd stop
Then upgrade using upgradepkg (as root): upgradepkg nfs-utils-1.0.4-i386-1.tgz
Finally, restart NFS services:
0 Talkback[s] (click to add your comment)