Linux Today: Linux News On Internet Time.

EnGarde Secure Linux Security Advisory: rsync

Jan 25, 2002, 21:48 (0 Talkback[s])
| EnGarde Secure Linux Security Advisory                January 25, 2002 |
| http://www.engardelinux.org/                          ESA-20020125-004 |
|                                                                        |
| Package:  rsync                                                        |
| Summary:  signed integer handling vulnerability                        |

  EnGarde Secure Linux is a secure distribution of Linux that features
  improved access control, host and network intrusion detection, Web
  based secure remote management, complete e-commerce using AllCommerce,
  and integrated open source security tools.

- --------
  There is a signed integer handling vulnerability in rsync which can
  allow an attacker to potentially gain root access.

- ------
  There are instances where rsync does not do proper input validation,
  allowing an attacker to write NULL-bytes to somewhat arbitrary locations
  of the stack.  This may potentially lead to a remote root shell.

  The Common Vulnerabilities and Exposures project (cve.mitre.org/) has
  assigned the name CAN-2002-0048 to this issue.

- --------
  This information applies only to EnGarde Secure Linux Community edition
  users. Registered users of the EnGarde Secure Linux Professional
  edition can use the Guardian Digital Secure Network to upgrade their
  packages automatically.

  All users should upgrade to the most recent version as outlined in
  this advisory.  All updates may be found at:


  Before upgrading the package, the machine must either:

    a) be booted into a "standard" kernel; or
    b) have LIDS disabled.

  To disable LIDS, execute the command:

    # /sbin/lidsadm -S -- -LIDS_GLOBAL

  To install the updated package, execute the command:

    # rpm -Uvh 

  You must now update the LIDS configuration by executing the command:

    # /usr/sbin/config_lids.pl

  To re-enable LIDS (if it was disabled), execute the command:

    # /sbin/lidsadm -S -- +LIDS_GLOBAL

  To verify the signatures of the updated packages, execute the command:

    # rpm -Kv 

- ----------------
  These updated packages are for EnGarde Secure Linux 1.0.1 (Finestra).

  Source Packages:

      MD5 Sum: 0d327ed5799c5407df49aa63e1611592

  Binary Packages:

      MD5 Sum: 130608e7f4d1600d8ceb47ad7fe7c4ce

      MD5 Sum: 17dea017e1991234eed30aea4248c479

- ----------

  Guardian Digital's public key:

  CVE Name CAN-2002-0048

  Credit for the discovery of this bug goes to:
    Sebastian Krahmer 

  rsync's Official Web Site:

  Security Contact:    security@guardiandigital.com
  EnGarde Advisories:  http://www.engardelinux.org/advisories.html

- --------------------------------------------------------------------------
$Id: ESA-20020125-004-rsync,v 1.1 2002/01/25 16:04:36 rwm Exp $
- --------------------------------------------------------------------------
Author: Ryan W. Maple,  
Copyright 2002, Guardian Digital, Inc.