Debian: klisa buffer overflow vulnerability
Summary
Olaf Kirch from SuSE Linux AG discovered another vulnerability in the
klisa package, that provides a LAN information service similar to
"Network Neighbourhood". The lisa daemon contains a buffer overflow
vulnerability which potentially enables any local user, as well any
any remote attacker on the LAN who is able to gain control of the LISa
port (7741 by default), to obtain root privileges. In addition, a
remote attacker potentially may be able to gain access to a victim's
account by using an "rlan://" URL in an HTML page or via another KDE
application.
This problem has been fixed in version 2.2.2-14.5 for the current
stable distribution (woody) and in version 2.2.2-14.20 for the
unstable distribution (sid). The old stable distribution (potato) is
not affected since it doesn't contain a kdenetwork package.
We recommend that you upgrade your klisa package immediately.
wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.
If you are using the apt-get package manager, use the line for
sources.list as given below:
apt-get update
will update the internal database
apt-get upgrade
will install corrected packages
You may use an automated update by adding the resources from the
footer to the proper configuration.
Debian GNU/Linux 3.0 alias woody
Source archives:
Size/MD5 checksum: 902 5703a3d55141bb8c5303f272ce621645
Size/MD5 checksum: 27909 1fa64b0c666264437b12217e18cb2370
Size/MD5 checksum: 3319181 25fbfc5d2592937480c0d3796a2416e0
Alpha architecture:
Size/MD5 checksum: 231724 69da8e109fbba81e2ec39e7564a5e232
Size/MD5 checksum: 154614 88cb75313d2e8a8ccdadec486e33cad4
Size/MD5 checksum: 189032 3e56c15e999c1be92b29455e5b3840de
Size/MD5 checksum: 998994 5bf7adec49121604648e74d3065cf64f
Size/MD5 checksum: 439600 494fbe08c36be99bf26ad2a31262a41a
Size/MD5 checksum: 1287614 7b69275e0c836f0245f692c29a6338a2
Size/MD5 checksum: 98716 1ad5bc9a04019c2f2872a9393f78933e
Size/MD5 checksum: 573114 96b607e8dc6fefde1eb7f4e7077ea9c3
Size/MD5 checksum: 616110 a7273bd31f16694169379c1c302da72b
Size/MD5 checksum: 135306 b314518232ac453a96a747422b7ed096
Size/MD5 checksum: 157034 8419f7685053466df9d82fe5520111ff
Size/MD5 checksum: 61828 c965e0f71b2ac37230d7eabdc5ad335f
Size/MD5 checksum: 100824 81f8f8b529298ccb2554e6739de18710
ARM architecture:
Size/MD5 checksum: 212826 22613e94e6e1a8c4e66befe6848114c2
Size/MD5 checksum: 133850 d4255ccdf32692cbb78c00bd08993285
Size/MD5 checksum: 155852 563938f1bd87076aaf5c48817cf32139
Size/MD5 checksum: 877528 3333b9bcdd1618042a1764a7305eb908
Size/MD5 checksum: 396134 c0beeb94d297ceac4542246d449270ae
Size/MD5 checksum: 1124306 60705edefb0b5d0f03ca52093ded65f6
Size/MD5 checksum: 76246 6d7d023feab0ad3f921351f99c65cd86
Size/MD5 checksum: 510528 c4f569b2ed804b074c9fa366666482d1
Size/MD5 checksum: 564822 49199157d771cb0c0f654f026789c138
Size/MD5 checksum: 116480 ad2f8603695b1980753d3469d95e99fc
Size/MD5 checksum: 137986 99e13a8bda86f95687140963aacdd108
Size/MD5 checksum: 61840 637150625c9ae3e20df2e7399ae06e97
Size/MD5 checksum: 83806 5bc9bf98070d97b2b15d3a66c551a5da
Intel IA-32 architecture:
Size/MD5 checksum: 216144 4d961682369ae981ba2983e1cf47c3e4
Size/MD5 checksum: 131416 026fa12d6d1a3b348d34f2505e80d07b
Size/MD5 checksum: 150286 1a57fd7c1f333c48dd4bd63c58e7955b
Size/MD5 checksum: 853834 4c837cd769a2c569a3d69fe4a663e54c
Size/MD5 checksum: 398284 dc316768803ad104a71254158e06bcab
Size/MD5 checksum: 1119142 3fb7fd37ec563113f44adcf4ebbb7ae1
Size/MD5 checksum: 75428 0cbfa2c5dfa1d2c76cf1da1b3f65bf85
Size/MD5 checksum: 505016 4523977624c037f6cc51fc5815d74c96
Size/MD5 checksum: 522966 588062288bd82f5f2aa0adf0ec19ccc8
Size/MD5 checksum: 115804 541a702af76c35025b2d1d8e57c0beba
Size/MD5 checksum: 132062 13ee61d948efb8cb36980b06f33df37d
Size/MD5 checksum: 61834 6aa68a08f38faa4ff23703be851c080b
Size/MD5 checksum: 84246 0d91be53dbe32e5d5f5498aa8aff0f67
Intel IA-64 architecture:
Size/MD5 checksum: 271284 4d9e07df9d0afaf08ef76c5db248e017
Size/MD5 checksum: 195178 f2253ab6a5147215effcfd42cef838d1
Size/MD5 checksum: 211114 90a6e6870d8ccc26078e9d04e34a741d
Size/MD5 checksum: 1312844 f19f33886beb5e59f9b7947f52a76aac
Size/MD5 checksum: 522028 77acef604cfe6effd6a7aae363353ddb
Size/MD5 checksum: 1361074 6ec3628cb523505639de75fc19f6c3f9
Size/MD5 checksum: 113816 b12d54cff9941edf1b43516a40c9200b
Size/MD5 checksum: 640900 58f68e26763d22983e261415800869fb
Size/MD5 checksum: 616086 f18bbd0a426390289c69e418b03ca8d8
Size/MD5 checksum: 148362 2fa6bfda5dbf4d41578c01c877aad063
Size/MD5 checksum: 207254 57213884b8c358f84d0006ea8549c638
Size/MD5 checksum: 61820 c61494236eefe98aac6618ad616cdeff
Size/MD5 checksum: 121594 367c37cdce0eebbe30314290ec5da37d
HP Precision architecture:
Size/MD5 checksum: 244238 0dd498eba215ebc0cbd8be68bcee4142
Size/MD5 checksum: 152264 acf2bfb067b2235d3fac53afe709a552
Size/MD5 checksum: 218082 649370154d1b35c381fb05c211597985
Size/MD5 checksum: 978224 28f56fdaf05f1f7173ac09a35cc7d906
Size/MD5 checksum: 443894 0be491ad5b54a87fad28d003b194617e
Size/MD5 checksum: 1253260 c57e9cddf873578b02d7cb675bc823d1
Size/MD5 checksum: 93150 bf9640b6448c03c8e0a98fdfd768ccfb
Size/MD5 checksum: 560778 e3c23415d2437ff55dde01de00cf3eb8
Size/MD5 checksum: 581528 1bd6db30a19d4b45ac13fd81d24d2b2a
Size/MD5 checksum: 139178 d4278f1d7e66cff5342dc7a2fa0339d3
Size/MD5 checksum: 168952 23e24b4268d6586f80571445d0c8a106
Size/MD5 checksum: 61840 adc19280c94b6d8c2d9d32d152aff236
Size/MD5 checksum: 116438 da5ab73bdfcc0cadf8f954bb8e123cc4
Motorola 680x0 architecture:
Size/MD5 checksum: 212220 fe2f3dba5ff90b76ea2caf93fb632293
Size/MD5 checksum: 125954 6abec2535b6629947e2e981bfcf6d71b
Size/MD5 checksum: 141494 959ffab86176e3d14df31d98600a4976
Size/MD5 checksum: 813424 e106dc4ca2cee6d89acf17d6f1795476
Size/MD5 checksum: 392354 08632fbefffabae387eaa1615343609a
Size/MD5 checksum: 1096870 b7397f59b13a066a186e6462e7c14491
Size/MD5 checksum: 75374 8fadc3176ac57ea2649a10dbb47bb58a
Size/MD5 checksum: 498394 6c2e48eb22a0884f9ae27747cc52c19c
Size/MD5 checksum: 552740 b847c3260c96239dbb623e6bcbff9e21
Size/MD5 checksum: 115614 721be39c33756b0cace8debdb59a26de
Size/MD5 checksum: 129160 907495dfc8a32a99154abe1f4c83c259
Size/MD5 checksum: 61850 7b11def46caf949f8cd936b6cc641098
Size/MD5 checksum: 82976 ac6cdd3d0ee7083d0edc62996dc7ae27
Big endian MIPS architecture:
Size/MD5 checksum: 214252 82a1eeffb8e712768287985d730afe94
Size/MD5 checksum: 138362 d70764f533f2713b16bbe71b5b5b3722
Size/MD5 checksum: 143550 e14a78dccba4a93dff9c4b39a7ba6f7b
Size/MD5 checksum: 913396 13600e3bfe121fdb524130b102450108
Size/MD5 checksum: 371376 f461340d56a5fb9d0271e144ae6c2e86
Size/MD5 checksum: 1144554 29e6bb5c42c24db0218ac80e2f332a90
Size/MD5 checksum: 89202 d2bfec328d53ff5da81cb8f5a520649c
Size/MD5 checksum: 538634 329afc80000b4c64b7d3c73792246b26
Size/MD5 checksum: 478722 65a114449fe3e936c535a27ecdcab1d8
Size/MD5 checksum: 119082 c37a91e290cdf0691201cdf15bab61f1
Size/MD5 checksum: 125526 5485fa33a527c5e1169b0a968924c48c
Size/MD5 checksum: 61844 5d756eccde931c0eaea5c1dc361a3790
Size/MD5 checksum: 85892 4e717ff002f95719378d04c8fa430bc2
Little endian MIPS architecture:
Size/MD5 checksum: 212468 94dc81acab0be5ce5ae8a1831fb286c8
Size/MD5 checksum: 136896 b2cebd318b1178cc545a4d7a2db2c108
Size/MD5 checksum: 143470 340399a6af16df9c4020ac774d900710
Size/MD5 checksum: 904238 82d94b844c852c54e274d17582ec219d
Size/MD5 checksum: 367496 0e4091cfd69f6fe33453f1ee614552f2
Size/MD5 checksum: 1137256 9239a78a0da463e9b4eb432f6474909e
Size/MD5 checksum: 88342 80732d4a99bd25b589150f541973c006
Size/MD5 checksum: 536188 db971869a03f018aeac082cf3233bf26
Size/MD5 checksum: 457002 a00cc2c48d536240ecf41781be7cf5e9
Size/MD5 checksum: 119126 875e2fb689196ce55e84a5a9fbc3c9af
Size/MD5 checksum: 124152 5dfaf52c30572d0510f9c0854dad9049
Size/MD5 checksum: 61840 b2ecfe1415a85002bdcda79b9e2a851c
Size/MD5 checksum: 85624 afece2daf6a691a32b777ab2155eb6ed
PowerPC architecture:
Size/MD5 checksum: 211380 86d50c2d975a75acb622786ba1c26b2d
Size/MD5 checksum: 130968 7efb231f91bc2f5a9174a3031984c081
Size/MD5 checksum: 151764 80e5c0f1f013f8a3d5e2fa43f18b7063
Size/MD5 checksum: 873410 e678e90765395e4f8e72b760a1a6b547
Size/MD5 checksum: 393548 ebd3368c94bdd9a979f8c5b30070f190
Size/MD5 checksum: 1130854 7a7a3efdc108957a447fab68c80bb67c
Size/MD5 checksum: 74368 112b06ff5265c380579d5d4ce908e933
Size/MD5 checksum: 506552 956b37a3f923a1bc4606d91cbf41654a
Size/MD5 checksum: 560548 4ab79c1151b2984177930275bac719c3
Size/MD5 checksum: 115562 29a3e3bba3c65cacd03df6b15460956f
Size/MD5 checksum: 137760 949e5a88dd22df55e51c72889c95fd94
Size/MD5 checksum: 61818 141415260c13a92e1472d4bf13d1bbca
Size/MD5 checksum: 86834 b4b2e368d2e92cdfef0686303359ab95
IBM S/390 architecture:
Size/MD5 checksum: 223220 f5ad12ea507434574bb5c9923e8a6a0d
Size/MD5 checksum: 129182 9faaf8bc5e4e43054c52100ef6b6d4c5
Size/MD5 checksum: 143432 b803b6d1b009d985eb467c4970efeb7e
Size/MD5 checksum: 828694 abf903606f7bc3524426d4269c46621c
Size/MD5 checksum: 390454 bad1a62c088f1dd56062ced6e65c5440
Size/MD5 checksum: 1133402 b80974a77772e6be96bbe95393ec0f15
Size/MD5 checksum: 77022 1430a5b5d5f6cbe749461e59f10315cd
Size/MD5 checksum: 503636 875a1ad7a8d04887e41cb64abbb0c452
Size/MD5 checksum: 539370 35f625ef4b83944baacf773ccf63bfcb
Size/MD5 checksum: 119022 e2876d70bc0c7d63c09ba83ad5824534
Size/MD5 checksum: 138452 64815c7c5f1e616479ec06e9d533861b
Size/MD5 checksum: 61824 6b02154b764d143cd6365591894da750
Size/MD5 checksum: 86452 da716d7c3dc1cc7c22d2f865a7161fd7
Sun Sparc architecture:
Size/MD5 checksum: 219900 8c94b85111f86f964cc23d781370ad14
Size/MD5 checksum: 134160 3bc59d1d025af03fadfd3547b60932bd
Size/MD5 checksum: 151648 a877576870cf341141a3bc95578f2549
Size/MD5 checksum: 865538 0bfb5ee6378538740878529411c1c862
Size/MD5 checksum: 399532 69ad91caa3e7d1714d3e3e69c894ad8c
Size/MD5 checksum: 1143456 f2b0c1d006a3592027dcd694dfc8897c
Size/MD5 checksum: 76326 5c59f05c288f4d6cc6a86e65c58c3f96
Size/MD5 checksum: 508002 9c1ec491b9d9b7d452533a8ae3d4bb1a
Size/MD5 checksum: 527082 ab9f7eebbbcf201b4a07ec7cdf72c409
Size/MD5 checksum: 122024 5bebdf5d72157112b170cb490fdeb995
Size/MD5 checksum: 136340 f04eae01b85d00f26eae4151c69f95ef
Size/MD5 checksum: 61824 ed33618d79243975743cafabb3d7aefe
Size/MD5 checksum: 84498 51892db1889864504a05c6f5cb36eca9
These files will probably be moved into the stable distribution on
its next revision.
For apt-get: deb Debian -- Security Information stable/updates main
For dpkg-ftp: dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show
