Debian: hpsockd denial of service fix

    Date03 Dec 2004
    CategoryDebian
    8478
    Posted ByJoe Shakespeare
    "infamous41md" discovered a buffer overflow condition in hpsockd, the socks server written at Hewlett-Packard. An exploit could cause the program to crash or may have worse effect.
    
    --------------------------------------------------------------------------
    Debian Security Advisory DSA 604-1                     This email address is being protected from spambots. You need JavaScript enabled to view it.
    http://www.debian.org/security/                             Martin Schulze
    December 3rd, 2004                      http://www.debian.org/security/faq
    --------------------------------------------------------------------------
    
    Package        : hpsockd
    Vulnerability  : missing input sanitising
    Problem-Type   : remote
    Debian-specific: no
    CVE ID         : CAN-2004-0993
    
    "infamous41md" discovered a buffer overflow condition in hpsockd, the
    socks server written at Hewlett-Packard.  An exploit could cause the
    program to crash or may have worse effect.
    
    For the stable distribution (woody) this problem has been fixed in
    version 0.6.woody1.
    
    For the unstable distribution (sid) this problem has been fixed in
    version 0.14.
    
    We recommend that you upgrade your hpsockd package.
    
    
    Upgrade Instructions
    --------------------
    
    wget url
            will fetch the file for you
    dpkg -i file.deb
            will install the referenced file.
    
    If you are using the apt-get package manager, use the line for
    sources.list as given below:
    
    apt-get update
            will update the internal database
    apt-get upgrade
            will install corrected packages
    
    You may use an automated update by adding the resources from the
    footer to the proper configuration.
    
    
    Debian GNU/Linux 3.0 alias woody
    --------------------------------
    
      Source archives:
    
        http://security.debian.org/pool/updates/main/h/hpsockd/hpsockd_0.6.woody1.dsc
          Size/MD5 checksum:      526 d5ac263f8a527e97c8d707977351805a
        http://security.debian.org/pool/updates/main/h/hpsockd/hpsockd_0.6.woody1.tar.gz
          Size/MD5 checksum:   127019 2de411d806f925658b771ffb1c974c41
    
      Alpha architecture:
    
        http://security.debian.org/pool/updates/main/h/hpsockd/hpsockd_0.6.woody1_alpha.deb
          Size/MD5 checksum:   115444 65338a0efb88db831b690a4c76d70997
    
      ARM architecture:
    
        http://security.debian.org/pool/updates/main/h/hpsockd/hpsockd_0.6.woody1_arm.deb
          Size/MD5 checksum:   104214 fdd81a813a8023b9585603cf53610616
    
      Intel IA-32 architecture:
    
        http://security.debian.org/pool/updates/main/h/hpsockd/hpsockd_0.6.woody1_i386.deb
          Size/MD5 checksum:    98588 805aef90031fa41a3cca9fa28b26d508
    
      Intel IA-64 architecture:
    
        http://security.debian.org/pool/updates/main/h/hpsockd/hpsockd_0.6.woody1_ia64.deb
          Size/MD5 checksum:   140132 0f8a29392e10ae44652f76534a420b0a
    
      HP Precision architecture:
    
        http://security.debian.org/pool/updates/main/h/hpsockd/hpsockd_0.6.woody1_hppa.deb
          Size/MD5 checksum:   111672 b643ff9b7e5964592b3c194b8fe7203b
    
      Motorola 680x0 architecture:
    
        http://security.debian.org/pool/updates/main/h/hpsockd/hpsockd_0.6.woody1_m68k.deb
          Size/MD5 checksum:    94430 911addc14236228693687c303788ad3a
    
      Big endian MIPS architecture:
    
        http://security.debian.org/pool/updates/main/h/hpsockd/hpsockd_0.6.woody1_mips.deb
          Size/MD5 checksum:   110742 63e55da32013613da6e69b7f9a84b97d
    
      Little endian MIPS architecture:
    
        http://security.debian.org/pool/updates/main/h/hpsockd/hpsockd_0.6.woody1_mipsel.deb
          Size/MD5 checksum:   111172 7c82b76671b118ca734f48c5e22e3245
    
      PowerPC architecture:
    
        http://security.debian.org/pool/updates/main/h/hpsockd/hpsockd_0.6.woody1_powerpc.deb
          Size/MD5 checksum:   101516 7447d074ff41cc3ad6873d2f423cc4fd
    
      IBM S/390 architecture:
    
        http://security.debian.org/pool/updates/main/h/hpsockd/hpsockd_0.6.woody1_s390.deb
          Size/MD5 checksum:   101594 add45d166bf0c926e143fd70c5a09ab1
    
      Sun Sparc architecture:
    
        http://security.debian.org/pool/updates/main/h/hpsockd/hpsockd_0.6.woody1_sparc.deb
          Size/MD5 checksum:   114216 510aca051ce938553e20af4f53104f46
    
    
      These files will probably be moved into the stable distribution on
      its next update.
    
    ---------------------------------------------------------------------------------
    For apt-get: deb http://security.debian.org/ stable/updates main
    For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
    Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it.
    Package info: `apt-cache show ' and http://packages.debian.org/
    
    
    You are not authorised to post comments.

    Comments powered by CComment

    LinuxSecurity Poll

    What do you think of the articles on LinuxSecurity?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 3 answer(s).
    /main-polls/24-what-do-you-think-of-the-quality-of-the-articles-on-linuxsecurity?task=poll.vote&format=json
    24
    radio
    [{"id":"87","title":"Excellent, don't change a thing!","votes":"65","type":"x","order":"1","pct":57.52,"resources":[]},{"id":"88","title":"Should be more technical","votes":"15","type":"x","order":"2","pct":13.27,"resources":[]},{"id":"89","title":"Should include more HOWTOs","votes":"33","type":"x","order":"3","pct":29.2,"resources":[]}]["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"]["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"]350
    bottom200

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.