Debian: hpsockd denial of service fix

    Date 03 Dec 2004
    8619
    Posted By Joe Shakespeare
    "infamous41md" discovered a buffer overflow condition in hpsockd, the socks server written at Hewlett-Packard. An exploit could cause the program to crash or may have worse effect.
    
    --------------------------------------------------------------------------
    Debian Security Advisory DSA 604-1                     This email address is being protected from spambots. You need JavaScript enabled to view it.
    https://www.debian.org/security/                             Martin Schulze
    December 3rd, 2004                      https://www.debian.org/security/faq
    --------------------------------------------------------------------------
    
    Package        : hpsockd
    Vulnerability  : missing input sanitising
    Problem-Type   : remote
    Debian-specific: no
    CVE ID         : CAN-2004-0993
    
    "infamous41md" discovered a buffer overflow condition in hpsockd, the
    socks server written at Hewlett-Packard.  An exploit could cause the
    program to crash or may have worse effect.
    
    For the stable distribution (woody) this problem has been fixed in
    version 0.6.woody1.
    
    For the unstable distribution (sid) this problem has been fixed in
    version 0.14.
    
    We recommend that you upgrade your hpsockd package.
    
    
    Upgrade Instructions
    --------------------
    
    wget url
            will fetch the file for you
    dpkg -i file.deb
            will install the referenced file.
    
    If you are using the apt-get package manager, use the line for
    sources.list as given below:
    
    apt-get update
            will update the internal database
    apt-get upgrade
            will install corrected packages
    
    You may use an automated update by adding the resources from the
    footer to the proper configuration.
    
    
    Debian GNU/Linux 3.0 alias woody
    --------------------------------
    
      Source archives:
    
        https://security.debian.org/pool/updates/main/h/hpsockd/hpsockd_0.6.woody1.dsc
          Size/MD5 checksum:      526 d5ac263f8a527e97c8d707977351805a
        https://security.debian.org/pool/updates/main/h/hpsockd/hpsockd_0.6.woody1.tar.gz
          Size/MD5 checksum:   127019 2de411d806f925658b771ffb1c974c41
    
      Alpha architecture:
    
        https://security.debian.org/pool/updates/main/h/hpsockd/hpsockd_0.6.woody1_alpha.deb
          Size/MD5 checksum:   115444 65338a0efb88db831b690a4c76d70997
    
      ARM architecture:
    
        https://security.debian.org/pool/updates/main/h/hpsockd/hpsockd_0.6.woody1_arm.deb
          Size/MD5 checksum:   104214 fdd81a813a8023b9585603cf53610616
    
      Intel IA-32 architecture:
    
        https://security.debian.org/pool/updates/main/h/hpsockd/hpsockd_0.6.woody1_i386.deb
          Size/MD5 checksum:    98588 805aef90031fa41a3cca9fa28b26d508
    
      Intel IA-64 architecture:
    
        https://security.debian.org/pool/updates/main/h/hpsockd/hpsockd_0.6.woody1_ia64.deb
          Size/MD5 checksum:   140132 0f8a29392e10ae44652f76534a420b0a
    
      HP Precision architecture:
    
        https://security.debian.org/pool/updates/main/h/hpsockd/hpsockd_0.6.woody1_hppa.deb
          Size/MD5 checksum:   111672 b643ff9b7e5964592b3c194b8fe7203b
    
      Motorola 680x0 architecture:
    
        https://security.debian.org/pool/updates/main/h/hpsockd/hpsockd_0.6.woody1_m68k.deb
          Size/MD5 checksum:    94430 911addc14236228693687c303788ad3a
    
      Big endian MIPS architecture:
    
        https://security.debian.org/pool/updates/main/h/hpsockd/hpsockd_0.6.woody1_mips.deb
          Size/MD5 checksum:   110742 63e55da32013613da6e69b7f9a84b97d
    
      Little endian MIPS architecture:
    
        https://security.debian.org/pool/updates/main/h/hpsockd/hpsockd_0.6.woody1_mipsel.deb
          Size/MD5 checksum:   111172 7c82b76671b118ca734f48c5e22e3245
    
      PowerPC architecture:
    
        https://security.debian.org/pool/updates/main/h/hpsockd/hpsockd_0.6.woody1_powerpc.deb
          Size/MD5 checksum:   101516 7447d074ff41cc3ad6873d2f423cc4fd
    
      IBM S/390 architecture:
    
        https://security.debian.org/pool/updates/main/h/hpsockd/hpsockd_0.6.woody1_s390.deb
          Size/MD5 checksum:   101594 add45d166bf0c926e143fd70c5a09ab1
    
      Sun Sparc architecture:
    
        https://security.debian.org/pool/updates/main/h/hpsockd/hpsockd_0.6.woody1_sparc.deb
          Size/MD5 checksum:   114216 510aca051ce938553e20af4f53104f46
    
    
      These files will probably be moved into the stable distribution on
      its next update.
    
    ---------------------------------------------------------------------------------
    For apt-get: deb https://security.debian.org/ stable/updates main
    For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
    Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it.
    Package info: `apt-cache show ' and https://packages.debian.org/
    
    

    LinuxSecurity Poll

    If you are using full-disk encryption: are you concerned about the resulting performance hit?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 2 answer(s).
    /main-polls/34-if-you-are-using-full-disk-encryption-are-you-concerned-about-the-resulting-performance-hit?task=poll.vote&format=json
    34
    radio
    [{"id":"120","title":"Yes","votes":"13","type":"x","order":"1","pct":59.09,"resources":[]},{"id":"121","title":"No ","votes":"9","type":"x","order":"2","pct":40.91,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
    bottom 200

    Advisories

    Please enable / Bitte aktiviere JavaScript!
    Veuillez activer / Por favor activa el Javascript![ ? ]

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.