search.internet.com

Become a Marketplace Partner internet.commerce Be a Commerce Partner Linux Today Enterprise Linux Today Apache Today JustLinux.com Linux Planet PHPBuilder All Linux Devices Technology Jobs LinuxToday Newsletters Subscribe News Subscribe PR Subscribe Security internet.com IT Developer Internet News Small Business Personal Technology Search internet.com Advertise Corporate Info Newsletters Tech Jobs E-mail Offers

Current Newswire: BIND 10: The First Year Sting in the tail for web's video codec search ANGLE wined3d in reverse Easy (and amazing) Debian for the N900 Insight into GNU/Linux boot process Reviewed: OpenOffice.org 3.2 Creating An NFS-Like Standalone Storage Server With GlusterFS On CentOS 5.4 Open Source is Not a Democracy Open Source Gets Political Open source and the Morevna project Sr Implementation Engineer –Networking (CO) Next Step Systems US-CO-Thornton Post A Job | Post A Resume Debian GNU/Linux Advisory: lha Jun 7, 2004, 01 :34 UTC (0 Talkback[s]) (2484 reads) Debian Security Advisory DSA 515-1 security@debian.org http://www.debian.org/security/ Matt Zimmerman June 5th, 2004 http://www.debian.org/security/faq Package : lha Vulnerability : several Problem-Type : local Debian-specific: no CVE Ids : CAN-2004-0234 CAN-2004-0235 Two vulnerabilities were discovered in lha: CAN-2004-0234 - Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14 allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testing or extracting the archive. CAN-2004-0235 - Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute pathnames with double leading slashes ("//absolute/path"). For the current stable distribution (woody), these problems have been fixed in version 1.14i-2woody1. For the unstable distribution (sid), these problems have been fixed in version 1.14i-8. We recommend that you update your lha package. Upgrade Instructions wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.0 alias woody Source archives: http://security.debian.org/pool/updates/non-free/l/lha/lha_1.14i-2woody1.dsc Size/MD5 checksum: 556 22b59156de011ddb84b0eaed4f174d2c http://security.debian.org/pool/updates/non-free/l/lha/lha_1.14i-2woody1.diff.gz Size/MD5 checksum: 21414 0f990fd920ea4770dd088a97c1c87f18 http://security.debian.org/pool/updates/non-free/l/lha/lha_1.14i.orig.tar.gz Size/MD5 checksum: 64196 10410742b0169f3357ef9a3f0f032037 Alpha architecture: http://security.debian.org/pool/updates/non-free/l/lha/lha_1.14i-2woody1_alpha.deb Size/MD5 checksum: 64820 b7e55241026435e0c882178f6606f33b ARM architecture: http://security.debian.org/pool/updates/non-free/l/lha/lha_1.14i-2woody1_arm.deb Size/MD5 checksum: 55542 62be18e035d6faedb4d990f16081d74e Intel IA-32 architecture: http://security.debian.org/pool/updates/non-free/l/lha/lha_1.14i-2woody1_i386.deb Size/MD5 checksum: 50090 7548e83cb7049fe43243f804eb456ed7 Intel IA-64 architecture: http://security.debian.org/pool/updates/non-free/l/lha/lha_1.14i-2woody1_ia64.deb Size/MD5 checksum: 73588 32e62b8fbd0cf2ef64d7838d005ef19e Motorola 680x0 architecture: http://security.debian.org/pool/updates/non-free/l/lha/lha_1.14i-2woody1_m68k.deb Size/MD5 checksum: 48632 bd5ce2c34a44952abf757993153fe238 PowerPC architecture: http://security.debian.org/pool/updates/non-free/l/lha/lha_1.14i-2woody1_powerpc.deb Size/MD5 checksum: 55160 9d8225135b7c6abe443a4d0d4fc27245 IBM S/390 architecture: http://security.debian.org/pool/updates/non-free/l/lha/lha_1.14i-2woody1_s390.deb Size/MD5 checksum: 53930 02c5e52b834539a30bd76f2e90265fb8 Sun Sparc architecture: http://security.debian.org/pool/updates/non-free/l/lha/lha_1.14i-2woody1_sparc.deb Size/MD5 checksum: 56526 8323a0469ef41c7fcf8b84c4b5f1a7ce These files will probably be moved into the stable distribution on its next revision. For apt-get: deb http://security.debian.org/ stable/updates main For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main Mailing list: debian-security-announce@lists.debian.org Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg> No talkbacks posted.   Home | Search Talkbacks | Customize View    Top of Page   Enter your comments below: * Your Name: * Your Email Address: * Subject: CC: [will also send this talkback to an E-Mail address] * Comments: Tags allowed:<I>,<B> and <U>. See our talkback-policy for more about talkback content. Fields marked with * are required!

All times are recorded in UTC. Linux is a trademark of Linus Torvalds. Powered by Linux, Apache and PHP The Network for Technology Professionals Search: About Internet.com Legal Notices, Licensing, Permissions, Privacy Policy. Advertise | Newsletters | E-mail Offers Solutions Whitepapers and eBooks Article: Adobe Helps PHP Developers Create Rich Internet Applications Case Study: Microsoft IT Strengthens Security with Data Loss Prevention Solution Article: Reduce Your Infrastructure Costs with Microsoft System Center Intel Brief: Five-Star IT Support--Intel Core 2 processor with vPro Delivers ROI of 524 Percent Article: Security Enhancements Abound in Windows Server 2008 Article: Enterprise Social Computing with Microsoft SharePoint 2010 Intel Whitepaper: Implementing Intel vPro Technology to Drive Down Client Management Costs Microsoft Whitepaper: Improve Communications and Collaboration Intel Article: Intel Core i5 vPro Brings Intelligence to the Processor Microsoft Personalized Whitepapers and Resources for You Microsoft Articles: Visual Studio 2010 Adobe Article: Java Developers Finding a Home at Adobe Flex Microsoft Whitepaper: Make Better Decisions - SQL Server 2008 Business Intelligence. MORE WHITEPAPERS, EBOOKS, AND ARTICLES Webcasts Video: How System Center Helps Reduce IT Costs IBM Cloud Computing for Developers Virtual Event, April 6-8 Microsoft Video: OCS and Exchange: Platform Futures MORE WEBCASTS, PODCASTS, AND VIDEOS Downloads and eKits HP PartnerONE | SolutionsINFINITE Visit us at hp.com/partners/us Iron Speed Designer Application Generator MORE DOWNLOADS, EKITS, AND FREE TRIALS Tutorials and Demos Learn Unified Communications Learn SQL Server 2008 Learn Windows Server 2008 R2 Internet.com Hot List: Get the Inside Scoop on IT and Developer Products Learn Forefront Learn System Center All About Botnets Learn SharePoint MORE TUTORIALS, DEMOS AND STEP-BY-STEP GUIDES