|
|
| Top White Papers
Current Newswire:
Advisories, Feburary 22, 2006Feb 23, 2006, 04:45 (0 Talkback[s])Debian GNU/LinuxDebian Security Advisory DSA 980-1 security@debian.org Package : tutos Joxean Koret discovered several security problems in tutos, a web-based team organization software. The Common Vulnerabilities and Exposures Project identifies the following problems: CVE-2004-2161 An SQL injection vulnerability allows the execution of SQL commands through the link_id parameter in file_overview.php. CVE-2004-2162 Cross-Site-Scripting vulnerabilities in the search function of the address book and in app_new.php allow the execution of web script code. The old stable distribution (woody) does not contain tutos packages. For the stable distribution (sarge) these problems have been fixed in version 1.1.20031017-2+1sarge1. The unstable distribution (sid) does no longer contain tutos packages. We recommend that you upgrade your tutos package. Upgrade Instructions wget url will fetch the file for you will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.1 alias sarge Source archives: http://security.debian.org/pool/updates/main/t/tutos/tutos_1.1.20031017-2+1sarge1.dsc Architecture independent components: http://security.debian.org/pool/updates/main/t/tutos/tutos_1.1.20031017-2+1sarge1_all.deb These files will probably be moved into the stable distribution on its next update. For apt-get: deb http://security.debian.org/ stable/updates main For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main Mailing list: debian-security-announce@lists.debian.org Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg> Gentoo LinuxGentoo Linux Security Advisory GLSA 200602-11 Severity: Low SynopsisA flaw in OpenSSH and Dropbear allows local users to elevate their privileges via scp. BackgroundOpenSSH is a free application suite consisting of server and clients that replace tools like telnet, rlogin, rcp and ftp with more secure versions offering additional functionality. Dropbear is an SSH server and client designed with a small memory footprint that includes OpenSSH scp code. Affected packages
Package / Vulnerable / Unaffected
1 net-misc/openssh < 4.2_p1-r1 >= 4.2_p1-r1
2 net-misc/dropbear < 0.47-r1 >= 0.47-r1
-------------------------------------------------------------------
2 affected packages on all of their supported architectures.
DescriptionTo copy from a local filesystem to another local filesystem, scp constructs a command line using 'cp' which is then executed via system(). Josh Bressers discovered that special characters are not escaped by scp, but are simply passed to the shell. ImpactBy tricking other users or applications to use scp on maliciously crafted filenames, a local attacker user can execute arbitrary commands with the rights of the user running scp. WorkaroundThere is no known workaround at this time. ResolutionAll OpenSSH users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-misc/openssh-4.2_p1-r1"
All Dropbear users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-misc/dropbear-0.47-r1"
References[ 1 ] CVE-2006-0225 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0225 AvailabilityThis GLSA and any updates to it are available for viewing at the Gentoo Security Website: http://security.gentoo.org/glsa/glsa-200602-11.xml Concerns?Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at http://bugs.gentoo.org. LicenseCopyright 2006 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.0 Mandriva LinuxMandriva Linux Security Advisory MDKSA-2006:045 Package : MySQL Problem Description: Eric Romang discovered a temporary file vulnerability in the mysql_install_db script provided with MySQL. This vulnerability only affects versions of MySQL 4.1.x prior to 4.1.12. The updated packages have been patched to address this issue. References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1636 Updated Packages: Mandriva Linux 10.2: Mandriva Linux 10.2/X86_64: To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/security/advisories If you want to report vulnerabilities, please contact security_(at)_mandriva.com Type Bits/KeyID Date User ID Mandriva Linux Security Advisory MDKSA-2006:046 Package : tar Problem Description: Gnu tar versions 1.14 and above have a buffer overflow vulnerability and some other issues including:
The updated packages have been patched to address this issue. References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0300 Updated Packages: Mandriva Linux 10.1: Mandriva Linux 10.1/X86_64: Mandriva Linux 10.2: Mandriva Linux 10.2/X86_64: Mandriva Linux 2006.0: Mandriva Linux 2006.0/X86_64: To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/security/advisories If you want to report vulnerabilities, please contact security_(at)_mandriva.com Type Bits/KeyID Date User ID
0 Talkback[s]
(click to add your comment)
|
