Debian: New eggdrop packages fix execution of arbitrary code

    Date05 Jan 2008
    CategoryDebian
    1750
    Posted ByLinuxSecurity Advisories
    It was discovered that eggdrop, an advanced IRC robot, was vulnerable to a buffer overflow which could result in a remote user executing arbitrary code.
    - ------------------------------------------------------------------------
    Debian Security Advisory DSA-1448-1                  This email address is being protected from spambots. You need JavaScript enabled to view it.
    http://www.debian.org/security/                               Steve Kemp
    January 05, 2008                      http://www.debian.org/security/faq
    - ------------------------------------------------------------------------
    
    Package        : eggdrop
    Vulnerability  : buffer overflow
    Problem type   : remote
    Debian-specific: no
    CVE Id(s)      : CVE-2007-2807
    Debian Bug     : 427157
    
    It was discovered that eggdrop, an advanced IRC robot, was vulnerable
    to a buffer overflow which could result in a remote user executing
    arbitrary code.
    
    For the stable distribution (etch), this problem has been fixed in version
    1.6.18-1etch1.
    
    For the old stable distribution (sarge), this problem has been fixed in
    version 1.6.17-3sarge1.
    
    For the unstable distribution (sid), this problem has been fixed in
    version 1.6.18-1.1.
    
    We recommend that you upgrade your eggdrop package.
    
    
    Upgrade instructions
    - --------------------
    
    wget url
            will fetch the file for you
    dpkg -i file.deb
            will install the referenced file.
    
    If you are using the apt-get package manager, use the line for
    sources.list as given below:
    
    apt-get update
            will update the internal database
    apt-get upgrade
            will install corrected packages
    
    You may use an automated update by adding the resources from the
    footer to the proper configuration.
    
    
    Debian GNU/Linux 3.1 alias sarge
    - --------------------------------
    
    Source archives:
    
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17-3sarge1.diff.gz
        Size/MD5 checksum:    36928 cfaa50371d39bd8e2994e37fecc6ff86
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17.orig.tar.gz
        Size/MD5 checksum:  1030413 a0f9befca240072e45cd57908bb819d0
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17-3sarge1.dsc
        Size/MD5 checksum:      651 b3522add4d8a7d6ca05072fa2e733509
    
    Architecture independent packages:
    
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1.6.17-3sarge1_all.deb
        Size/MD5 checksum:   410510 bb84e646defd5d2f29eef07a4bcddc35
    
    alpha architecture (DEC Alpha)
    
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17-3sarge1_alpha.deb
        Size/MD5 checksum:   602006 bd5130ad50ff7a265a1a52bccf41ee4e
    
    amd64 architecture (AMD x86_64 (AMD64))
    
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17-3sarge1_amd64.deb
        Size/MD5 checksum:   535646 67bf2ced5e6c6b7fd36a4f31e0dd563f
    
    arm architecture (ARM)
    
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17-3sarge1_arm.deb
        Size/MD5 checksum:   494010 03361c7e85a481bf32991fab01ebc544
    
    hppa architecture (HP PA RISC)
    
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17-3sarge1_hppa.deb
        Size/MD5 checksum:   594058 a7b7fedc13f8fff6812d02878c8ef871
    
    i386 architecture (Intel ia32)
    
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17-3sarge1_i386.deb
        Size/MD5 checksum:   470438 f3a8dde2d859cbd72cfa8a50ef7c500d
    
    ia64 architecture (Intel ia64)
    
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17-3sarge1_ia64.deb
        Size/MD5 checksum:   733390 f5e186d15eb55594c203fc76f03fc6b4
    
    m68k architecture (Motorola Mc680x0)
    
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17-3sarge1_m68k.deb
        Size/MD5 checksum:   439430 876fa0049e3eae163c88f4fc21ef3991
    
    mips architecture (MIPS (Big Endian))
    
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17-3sarge1_mips.deb
        Size/MD5 checksum:   514084 8a2c0716911a4f14a79525f4bda97558
    
    mipsel architecture (MIPS (Little Endian))
    
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17-3sarge1_mipsel.deb
        Size/MD5 checksum:   516766 f9d2046d98a283c253b6bd0890e19a76
    
    powerpc architecture (PowerPC)
    
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17-3sarge1_powerpc.deb
        Size/MD5 checksum:   516616 5e26e11c8cc8248ab55abb047469268d
    
    s390 architecture (IBM S/390)
    
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17-3sarge1_s390.deb
        Size/MD5 checksum:   524026 e1a9c4e11d1ef39a5e9c95fa13b82d36
    
    sparc architecture (Sun SPARC/UltraSPARC)
    
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.17-3sarge1_sparc.deb
        Size/MD5 checksum:   496820 f6226930abbc54b1c9f6f12ca16b0c4b
    
    
    Debian GNU/Linux 4.0 alias etch
    - -------------------------------
    
    Source archives:
    
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18.orig.tar.gz
        Size/MD5 checksum:  1025608 c2734a51926bdf0380d8bb53f5a7b2ee
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18-1etch1.dsc
        Size/MD5 checksum:      642 51a806bb57b49ad48aaf33de7ee68a22
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18-1etch1.diff.gz
        Size/MD5 checksum:     7735 1a4235a0c37b8ceda4f9a6c7d959caac
    
    Architecture independent packages:
    
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1.6.18-1etch1_all.deb
        Size/MD5 checksum:   412462 68732ebe9e8a2acc3c0f6d014c40117d
    
    alpha architecture (DEC Alpha)
    
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18-1etch1_alpha.deb
        Size/MD5 checksum:   596918 34ee4259e293b79c6e070b0d6c674227
    
    amd64 architecture (AMD x86_64 (AMD64))
    
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18-1etch1_amd64.deb
        Size/MD5 checksum:   537278 1f50307bb1f23c45a66b2727b7f1def8
    
    arm architecture (ARM)
    
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18-1etch1_arm.deb
        Size/MD5 checksum:   498644 9df0fb22c80946159524c92b57427ffe
    
    hppa architecture (HP PA RISC)
    
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18-1etch1_hppa.deb
        Size/MD5 checksum:   599774 1e37281849d63b4094cca6f80231f1df
    
    i386 architecture (Intel ia32)
    
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18-1etch1_i386.deb
        Size/MD5 checksum:   476308 cd53f77bd94f508fe22891368c7733a5
    
    ia64 architecture (Intel ia64)
    
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18-1etch1_ia64.deb
        Size/MD5 checksum:   755256 3d0786df79f2a112a8ddf2c13b1a25b0
    
    mips architecture (MIPS (Big Endian))
    
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18-1etch1_mips.deb
        Size/MD5 checksum:   534334 992714b10e468def8d919d374f99b1f1
    
    mipsel architecture (MIPS (Little Endian))
    
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18-1etch1_mipsel.deb
        Size/MD5 checksum:   537058 d5a5471f4e5dd41638886c5747820a4f
    
    powerpc architecture (PowerPC)
    
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18-1etch1_powerpc.deb
        Size/MD5 checksum:   522180 9aed03927df0bfd92ce68f1832881cbc
    
    s390 architecture (IBM S/390)
    
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18-1etch1_s390.deb
        Size/MD5 checksum:   529796 224f6400c4c880fc6534e63ace1d1979
    
    sparc architecture (Sun SPARC/UltraSPARC)
    
      http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18-1etch1_sparc.deb
        Size/MD5 checksum:   491240 4c0efbfedc4604ae67edaf8eae2f3229
    
    
      These files will probably be moved into the stable distribution on
      its next update.
    
    - ---------------------------------------------------------------------------------
    For apt-get: deb http://security.debian.org/ stable/updates main
    For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
    Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it.
    
    You are not authorised to post comments.

    Comments powered by CComment

    LinuxSecurity Poll

    What do you think of the articles on LinuxSecurity?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 3 answer(s).
    /main-polls/24-what-do-you-think-of-the-quality-of-the-articles-on-linuxsecurity?task=poll.vote&format=json
    24
    radio
    [{"id":"87","title":"Excellent, don't change a thing!","votes":"7","type":"x","order":"1","pct":58.33,"resources":[]},{"id":"88","title":"Should be more technical","votes":"3","type":"x","order":"2","pct":25,"resources":[]},{"id":"89","title":"Should include more HOWTOs","votes":"2","type":"x","order":"3","pct":16.67,"resources":[]}]["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"]["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"]350
    bottom200

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.