Gentoo Linux Advisories: FreeRADIUS, xine-lib, glFTPd, GTK+ 2

---

Gentoo Linux Security Advisory GLSA 200409-29

---

http://security.gentoo.org/

---

Severity: Normal
Title: FreeRADIUS: Multiple Denial of Service vulnerabilities
Date: September 22, 2004
Bugs: #60587
ID: 200409-29

---

Synopsis

Multiple Denial of Service vulnerabilities were found and fixed
in FreeRADIUS.

Background

FreeRADIUS is an open source RADIUS authentication server
implementation.

Affected packages

Description

There are undisclosed defects in the way FreeRADIUS handles
incorrect received packets.

Impact

A remote attacker could send specially-crafted packets to the
FreeRADIUS server to deny service to other users by crashing the
server.

Workaround

There is no known workaround at this time.

Resolution

All FreeRADIUS users should upgrade to the latest version:

    # emerge sync
    # emerge -pv ">=net-dialup/freeradius-1.0.1"
    # emerge ">=net-dialup/freeradius-1.0.1"

References

[ 1 ] FreeRADIUS Vulnerability Notifications

http://www.freeradius.org/security.html

Availability

This GLSA and any updates to it are available for viewing at the
Gentoo Security Website:

http://security.gentoo.org/glsa/glsa-200409-29.xml

Concerns?

Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or
alternatively, you may file a bug at http://bugs.gentoo.org.

License

Copyright 2004 Gentoo Foundation, Inc; referenced text belongs
to its owner(s).

The contents of this document are licensed under the Creative
Commons – Attribution / Share Alike license.

http://creativecommons.org/licenses/by-sa/1.0

---

Gentoo Linux Security Advisory GLSA 200409-30

---

http://security.gentoo.org/

---

Severity: Normal
Title: xine-lib: Multiple vulnerabilities
Date: September 22, 2004
Bugs: #64348
ID: 200409-30

---

Synopsis

xine-lib contains several vulnerabilities potentially allowing
the execution of arbitrary code.

Background

xine-lib is a multimedia library which can be utilized to create
multimedia frontends.

Affected packages

Description

xine-lib contains two stack-based overflows and one heap-based
overflow. In the code reading VCD disc labels, the ISO disc label
is copied into an unprotected stack buffer of fixed size. Also,
there is a buffer overflow in the code that parses subtitles and
prepares them for display (XSA-2004-4). Finally, xine-lib contains
a heap-based overflow in the DVD sub-picture decoder
(XSA-2004-5).

(Please note that the VCD MRL issue mentioned in XSA-2004-4 was
fixed with GLSA 200408-18.)

Impact

With carefully-crafted VCDs, DVDs, MPEGs or subtitles, an
attacker may cause xine-lib to execute arbitrary code with the
permissions of the user.

Workaround

There is no known workaround at this time.

Resolution

All xine-lib users should upgrade to the latest version:

    # emerge sync
    # emerge -pv ">=media-libs/xine-lib-1_rc6"
    # emerge ">=media-libs/xine-lib-1_rc6"

References

[ 1 ] BugTraq Announcement (XSA-2004-4)

http://www.securityfocus.com/archive/1/375485/2004-09-02/2004-09-08/0

[ 2 ] BugTraq Announcement (XSA-2004-5)

http://www.securityfocus.com/archive/1/375482/2004-09-02/2004-09-08/0

Availability

This GLSA and any updates to it are available for viewing at the
Gentoo Security Website:

http://security.gentoo.org/glsa/glsa-200409-30.xml

Concerns?

Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or
alternatively, you may file a bug at http://bugs.gentoo.org.

License

Copyright 2004 Gentoo Foundation, Inc; referenced text belongs
to its owner(s).

The contents of this document are licensed under the Creative
Commons – Attribution / Share Alike license.

http://creativecommons.org/licenses/by-sa/1.0

---

Gentoo Linux Security Advisory GLSA 200409-27

---

http://security.gentoo.org/

---

Severity: Normal
Title: glFTPd: Local buffer overflow vulnerability
Date: September 21, 2004
Bugs: #64809
ID: 200409-27

---

Synopsis

glFTPd is vulnerable to a local buffer overflow which may allow
arbitrary code execution.

Background

glFTPd is a highly configurable FTP server with many
features.

Affected packages

Description

The glFTPd server is vulnerable to a buffer overflow in the
‘dupescan’ program. This vulnerability is due to an unsafe strcpy()
call which can cause the program to crash when a large argument is
passed.

Impact

A local user with malicious intent can pass a parameter to the
dupescan program that exceeds the size of the buffer, causing it to
overflow. This can lead the program to crash, and potentially allow
arbitrary code execution with the permissions of the user running
glFTPd, which could be the root user.

Workaround

There is no known workaround at this time.

Resolution

All glFTPd users should upgrade to the latest version:

    # emerge sync
    # emerge -pv ">=net-ftp/glftpd-1.32-r1"
    # emerge ">=net-ftp/glftpd-1.32-r1"

References

[ 1 ] BugTraq Advisory

http://www.securityfocus.com/archive/1/375775/2004-09-17/2004-09-23/0

[ 2 ] glFTPd Announcement

http://www.glftpd.com/modules.php?op=modload&name=News&file=article&sid=23&mode=thread&order=0&thold=0

Availability

This GLSA and any updates to it are available for viewing at the
Gentoo Security Website:

http://security.gentoo.org/glsa/glsa-200409-27.xml

Concerns?

Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or
alternatively, you may file a bug at http://bugs.gentoo.org.

License

Copyright 2004 Gentoo Foundation, Inc; referenced text belongs
to its owner(s).

The contents of this document are licensed under the Creative
Commons – Attribution / Share Alike license.

http://creativecommons.org/licenses/by-sa/1.0

---

Gentoo Linux Security Advisory GLSA 200409-28

---

http://security.gentoo.org/

---

Severity: Normal
Title: GTK+ 2, gdk-pixbuf: Multiple image decoding
vulnerabilities
Date: September 21, 2004
Bugs: #64230
ID: 200409-28

---

Synopsis

The GdkPixbuf library, which is also included in GTK+ 2,
contains several vulnerabilities that could lead to a Denial of
Service or the execution of arbitrary code.

Background

GTK+ (GIMP Toolkit +) is a toolkit for creating graphical user
interfaces. The GdkPixbuf library provides facilities for image
handling. It is available as a standalone library as well as
shipped with GTK+ 2.

Affected packages

---

2 affected packages on all of their supported architectures.

---

Description

A vulnerability has been discovered in the BMP image
preprocessor (CAN-2004-0753). Furthermore, Chris Evans found a
possible integer overflow in the pixbuf_create_from_xpm() function,
resulting in a heap overflow (CAN-2004-0782). He also found a
potential stack-based buffer overflow in the xpm_extract_color()
function (CAN-2004-0783). A possible integer overflow has also been
found in the ICO decoder.

Impact

With a specially crafted BMP image an attacker could cause an
affected application to enter an infinite loop when that image is
being processed. Also, by making use of specially crafted XPM or
ICO images an attacker could trigger the overflows, which
potentially allows the execution of arbitrary code.

Workaround

There is no known workaround at this time.

Resolution

All GTK+ 2 users should upgrade to the latest version:

    # emerge sync
    # emerge -pv ">=x11-libs/gtk+-2.4.9-r1"
    # emerge ">=x11-libs/gtk+-2.4.9-r1"

All GdkPixbuf users should upgrade to the latest version:

    # emerge sync
    # emerge -pv ">=media-libs/gdk-pixbuf-0.22.0-r3"
    # emerge ">=media-libs/gdk-pixbuf-0.22.0-r3"

References

[ 1 ] CAN-2004-0753

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0753

[ 2 ] CAN-2004-0782

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0782

[ 3 ] CAN-2004-0783

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0783

[ 4 ] CAN-2004-0788

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0788

[ 5 ] GNOME Bug 150601

http://bugzilla.gnome.org/show_bug.cgi?id=150601

Availability

This GLSA and any updates to it are available for viewing at the
Gentoo Security Website:

http://security.gentoo.org/glsa/glsa-200409-28.xml

Concerns?

Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or
alternatively, you may file a bug at http://bugs.gentoo.org.

License

Copyright 2004 Gentoo Foundation, Inc; referenced text belongs
to its owner(s).

The contents of this document are licensed under the Creative
Commons – Attribution / Share Alike license.

http://creativecommons.org/licenses/by-sa/1.0