Debian GNU/Linux Advisories: skk, ddskk, unzip, xbl, phpsysinfo, teapop

Debian Security Advisory DSA 343-1	[email protected]
http://www.debian.org/security/	Matt Zimmerman
July 8th, 2003	http://www.debian.org/security/faq

Package	:	skk, ddskk
Vulnerability	:	insecure temporary file
Problem-Type	:	local
Debian-specific	:	no

skk (Simple Kana to Kanji conversion program), does not take
appropriate security precautions when creating temporary files.
This bug could potentially be exploited to overwrite arbitrary
files with the privileges of the user running Emacs and skk.

ddskk is derived from the same code, and contains the same
bug.

For the stable distribution (woody) this problem has been fixed
in skk version 10.62a-4woody1 and ddskk version
11.6.rel.0-2woody1.

For the unstable distribution (sid) this problem has been fixed
in ddskk version 12.1.cvs.20030622-1, and skk will be fixed
soon.

We recommend that you update your skk and ddskk package-.

Upgrade Instructions

wget url

will fetch the file for you
dpkg -i file.deb

will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update

will update the internal database apt-get upgrade

will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.

Debian GNU/Linux 3.0 alias woody

Source archives:

http://security.debian.org/pool/updates/main/s/skk/skk_10.62a-4woody1.dsc

Size/MD5 checksum: 650 4dfedc401e846e185a14bf86e12dde82

http://security.debian.org/pool/updates/main/s/skk/skk_10.62a-4woody1.diff.gz

Size/MD5 checksum: 10343 4e2d9a337118252422803eb5b5c13cc0

http://security.debian.org/pool/updates/main/s/skk/skk_10.62a.orig.tar.gz

Size/MD5 checksum: 2952817 30bacbe572adf5c353bc65348ef7f2e4

http://security.debian.org/pool/updates/main/d/ddskk/ddskk_11.6.rel.0-2woody1.dsc

Size/MD5 checksum: 651 7386dc3f171c6620065ed32bea7a61c8

http://security.debian.org/pool/updates/main/d/ddskk/ddskk_11.6.rel.0-2woody1.diff.gz

Size/MD5 checksum: 8684 2c345b4c6979509cd92ac2e411ae0825

http://security.debian.org/pool/updates/main/d/ddskk/ddskk_11.6.rel.0.orig.tar.gz

Size/MD5 checksum: 583049 9c4b78ae5a5b9ca02d0cd450c0f01c47

Architecture independent components:

http://security.debian.org/pool/updates/main/s/skk/skk_10.62a-4woody1_all.deb

Size/MD5 checksum: 314864 7bc8fb95fb95c886377cc0eafd4f8281

Alpha architecture:

http://security.debian.org/pool/updates/main/s/skk/skkserv_10.62a-4woody1_alpha.deb

Size/MD5 checksum: 14664 95cadc075d8daa920f018b4dec830761

ARM architecture:

http://security.debian.org/pool/updates/main/s/skk/skkserv_10.62a-4woody1_arm.deb

Size/MD5 checksum: 12804 662ab1f2f69117112b7b8da543d04adf

Intel IA-32 architecture:

http://security.debian.org/pool/updates/main/s/skk/skkserv_10.62a-4woody1_i386.deb

Size/MD5 checksum: 12322 0ff353139210f243e35ed6c275f7da98

Intel IA-64 architecture:

http://security.debian.org/pool/updates/main/s/skk/skkserv_10.62a-4woody1_ia64.deb

Size/MD5 checksum: 16880 32cfed0ae347a436790c364204a61e6b

HP Precision architecture:

http://security.debian.org/pool/updates/main/s/skk/skkserv_10.62a-4woody1_hppa.deb

Size/MD5 checksum: 13788 d2389fb2860653e0ef8bc72b314a87fb

Motorola 680×0 architecture:

http://security.debian.org/pool/updates/main/s/skk/skkserv_10.62a-4woody1_m68k.deb

Size/MD5 checksum: 12076 36963139b8c6a2f310e254c214958d7f

Big endian MIPS architecture:

http://security.debian.org/pool/updates/main/s/skk/skkserv_10.62a-4woody1_mips.deb

Size/MD5 checksum: 13328 94b05baa358a3fda8d096c2f4f1d894c

Little endian MIPS architecture:

http://security.debian.org/pool/updates/main/s/skk/skkserv_10.62a-4woody1_mipsel.deb

Size/MD5 checksum: 13326 5c0f5fa48cef96b37ae66a1b7cecf8e2

PowerPC architecture:

http://security.debian.org/pool/updates/main/s/skk/skkserv_10.62a-4woody1_powerpc.deb

Size/MD5 checksum: 12868 34eaf4315a5a358d84b5860a051d8563

IBM S/390 architecture:

http://security.debian.org/pool/updates/main/s/skk/skkserv_10.62a-4woody1_s390.deb

Size/MD5 checksum: 13280 0c989e849f3dcdc14b26d4a25557d00f

Sun Sparc architecture:

http://security.debian.org/pool/updates/main/s/skk/skkserv_10.62a-4woody1_sparc.deb

Size/MD5 checksum: 15714 7a75008647a0d60f5fd2910bb69baffa

Architecture independent components:

http://security.debian.org/pool/updates/main/d/ddskk/ddskk_11.6.rel.0-2woody1_all.deb

Size/MD5 checksum: 488140 1a0a928861d148ae1dc005ecf50303dd

These files will probably be moved into the stable distribution
on its next revision.

Debian Security Advisory DSA 344-1	[email protected]
http://www.debian.org/security/	Matt Zimmerman
July 8th, 2003	http://www.debian.org/security/faq

Package	:	unzip
Vulnerability	:	directory traversal
Problem-Type	:	local
Debian-specific	:	no
CVE Ids	:	CAN-2003-0282

A directory traversal vulnerability in UnZip 5.50 allows
attackers to bypass a check for relative pathnames (“../”) by
placing certain invalid characters between the two “.”
characters.

For the stable distribution (woody) this problem has been fixed
in version 5.50-1woody1.

For the unstable distribution (sid) this problem will be fixed
soon.

We recommend that you update your unzip package.

Upgrade Instructions

wget url

will fetch the file for you
dpkg -i file.deb

will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update

will update the internal database apt-get upgrade

will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.

Debian GNU/Linux 3.0 alias woody

Source archives:

http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody1.dsc

Size/MD5 checksum: 528 78fe98174204f12d53c472429f570b72

http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody1.diff.gz

Size/MD5 checksum: 4281 d143f706e7598b72b80c2b0479f74c82

http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50.orig.tar.gz

Size/MD5 checksum: 1068379 6d27bcdf9b51d0ad0f78161d0f99582e

Alpha architecture:

http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody1_alpha.deb

Size/MD5 checksum: 159796 d102536d4df17efa47d181e892cd0a78

ARM architecture:

http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody1_arm.deb

Size/MD5 checksum: 138900 2cad290445168c872140ccfa4d991c64

Intel IA-32 architecture:

http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody1_i386.deb

Size/MD5 checksum: 122262 23f370812910bfe54af5248ed8d436b0

Intel IA-64 architecture:

http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody1_ia64.deb

Size/MD5 checksum: 190398 68e1c6567a8dad804dcb6e312e3b081b

HP Precision architecture:

http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody1_hppa.deb

Size/MD5 checksum: 146386 1b81ff0dd1dcc257b03075656d54aaba

Motorola 680×0 architecture:

http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody1_m68k.deb

Size/MD5 checksum: 118962 8ed05af2af30b9965bec490fa33c3647

Big endian MIPS architecture:

http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody1_mips.deb

Size/MD5 checksum: 142572 b7d0ead363f47c34188ef454d13d1495

Little endian MIPS architecture:

http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody1_mipsel.deb

Size/MD5 checksum: 143038 45b35c8d561fcbcbfa74d18988ac9ef0

PowerPC architecture:

http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody1_powerpc.deb

Size/MD5 checksum: 135910 e694627b076850fad5979d361038bc48

IBM S/390 architecture:

http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody1_s390.deb

Size/MD5 checksum: 136418 b5b4c6448d02b8aba0ecbe7892d9393c

Sun Sparc architecture:

http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody1_sparc.deb

Size/MD5 checksum: 146950 b01e9ee7609d8bdbff57e61c0679d691

These files will probably be moved into the stable distribution
on its next revision.

Debian Security Advisory DSA 345-1	[email protected]
http://www.debian.org/security/	Matt Zimmerman
July 8th, 2003	http://www.debian.org/security/faq

Package	:	xbl
Vulnerability	:	buffer overflow
Problem-Type	:	local
Debian-specific	:	no
CVE Ids	:	CAN-2003-0535

Another buffer overflow was discovered in xbl, distinct from the
one addressed in DSA-327 (CAN-2003-0451), involving the -display
command line option. This vulnerability could be exploited by a
local attacker to gain gid ‘games’.

For the stable distribution (woody) this problem has been fixed
in version 1.0k-3woody2.

For the unstable distribution (sid) this problem is fixed in
version 1.0k-6.

We recommend that you update your xbl package.

Upgrade Instructions

wget url

will fetch the file for you
dpkg -i file.deb

will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update

will update the internal database apt-get upgrade

will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.

Debian GNU/Linux 3.0 alias woody

Source archives:

http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0k-3woody2.dsc

Size/MD5 checksum: 567 cc617cf2ab0beba1290a1948dec24015

http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0k-3woody2.diff.gz

Size/MD5 checksum: 10093 8e0ac57663ff0657bbcd406ae40d99e8

http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0k.orig.tar.gz

Size/MD5 checksum: 135080 22e7822a449ae5b68695158fd59ea49c

Alpha architecture:

http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0k-3woody2_alpha.deb

Size/MD5 checksum: 122282 4d9b7d78318306f488831477d6b31ae6

ARM architecture:

http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0k-3woody2_arm.deb

Size/MD5 checksum: 111098 300c03bdd43a4413ac72346c14cae0ed

Intel IA-32 architecture:

http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0k-3woody2_i386.deb

Size/MD5 checksum: 103296 54bfaa17756365c4559b608ee596c262

Intel IA-64 architecture:

http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0k-3woody2_ia64.deb

Size/MD5 checksum: 151432 4e26d6422591122e4cf22ae16f60e6cf

HP Precision architecture:

http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0k-3woody2_hppa.deb

Size/MD5 checksum: 116784 91232ce406230a0970b306dc0a5f1b9f

Motorola 680×0 architecture:

http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0k-3woody2_m68k.deb

Size/MD5 checksum: 97746 89dfc31946135fbde0d1a723f4c69304

Big endian MIPS architecture:

http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0k-3woody2_mips.deb

Size/MD5 checksum: 116010 feb3b79691e096b7006e01fcdcb4d987

Little endian MIPS architecture:

http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0k-3woody2_mipsel.deb

Size/MD5 checksum: 115888 67367915c9c2b73a31d679ea87fa5636

PowerPC architecture:

http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0k-3woody2_powerpc.deb

Size/MD5 checksum: 112178 59472b074ff777847bfd741a23b48f5d

IBM S/390 architecture:

http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0k-3woody2_s390.deb

Size/MD5 checksum: 106278 aeeb3522110d4308fab12ac704942491

Sun Sparc architecture:

http://security.debian.org/pool/updates/main/x/xbl/xbl_1.0k-3woody2_sparc.deb

Size/MD5 checksum: 111230 8bd8f330c33d7d00bff11db1ac4318ed

These files will probably be moved into the stable distribution
on its next revision.

Debian Security Advisory DSA 346-1	[email protected]
http://www.debian.org/security/	Matt Zimmerman
July 8th, 2003	http://www.debian.org/security/faq

Package	:	phpsysinfo
Vulnerability	:	directory traversal
Problem-Type	:	local
Debian-specific	:	no
CVE Ids	:	CAN-2003-0536

Albert Puigsech Galicia <[email protected]> reported
that phpsysinfo, a web-based program to display status information
about the system, contains two vulnerabilities which could allow
local files to be read, or arbitrary PHP code to be executed, under
the privileges of the web server process (usually www-data). These
vulnerabilities require access to a writable directory on the
system in order to be exploited.

For the stable distribution (woody) this problem has been fixed
in version 2.0-3woody1.

For the unstable distribution (sid) this problem will be fixed
soon. See Debian bug #200543.

We recommend that you update your phpsysinfo package.

Upgrade Instructions

wget url

will fetch the file for you
dpkg -i file.deb

will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update

will update the internal database apt-get upgrade

will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.

Debian GNU/Linux 3.0 alias woody

Source archives:

http://security.debian.org/pool/updates/main/p/phpsysinfo/phpsysinfo_2.0-3woody1.dsc

Size/MD5 checksum: 622 deb877ec19a6f2e45b7f81cad3124996

http://security.debian.org/pool/updates/main/p/phpsysinfo/phpsysinfo_2.0-3woody1.diff.gz

Size/MD5 checksum: 2374 c0b49bbef1bdecdb687c4d78c82e6ba6

http://security.debian.org/pool/updates/main/p/phpsysinfo/phpsysinfo_2.0.orig.tar.gz

Size/MD5 checksum: 48104 abd184ebc003aeba07d9945bb9c6ff0f

Architecture independent components:

http://security.debian.org/pool/updates/main/p/phpsysinfo/phpsysinfo_2.0-3woody1_all.deb

Size/MD5 checksum: 42108 6d65ae73ba4c74989d85082700d5f73d

These files will probably be moved into the stable distribution
on its next revision.

Debian Security Advisory DSA 347-1	[email protected]
http://www.debian.org/security/	Matt Zimmerman
July 8th, 2003	http://www.debian.org/security/faq

Package	:	teapop
Vulnerability	:	SQL injection
Problem-Type	:	remote
Debian-specific	:	no
CVE Ids	:	CAN-2003-0515

teapop, a POP-3 server, includes modules for authenticating
users against a PostgreSQL or MySQL database. These modules do not
properly escape user-supplied strings before using them in SQL
queries. This vulnerability could be exploited to execute arbitrary
SQL under the privileges of the database user as which teapop has
authenticated.

For the stable distribution (woody) this problem has been fixed
in version 0.3.4-1woody2.

For the unstable distribution (sid) this problem has been fixed
in version 0.3.5-2.

We recommend that you update your teapop package.

Upgrade Instructions

wget url

will fetch the file for you
dpkg -i file.deb

will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update

will update the internal database apt-get upgrade

will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.