Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 436
Alerts This Week
Warning Icon 1 436

Debian DSA 1122-1 Critical: Net::Server Format String Exploit

debian
Calendar Grey July 24, 2006
Scroller Debian
Uncover the solution for service disruption in Debian's Net::Server Perl module. Explore the specifics of the package revision.
Peter Bieringer discovered that the "log" function in the Net::Server Perl module, an extensible, general perl server engine, is not safe against format string exploits.
Topics%20covered

Topics Covered

security advisory remote exploit debian format string DoS package upgrade libnet-server-perl

Summary


For the stable distribution (sarge) this problem has been fixed in
version 0.87-3sarge1.

For the unstable distribution (sid) this problem has been fixed in
version 0.89-1.

We recommend that you upgrade your libnet-server-perl package.


Upgrade Instructions
- --------------------wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 3.1 alias sarge

Size/MD5 checksum: 692 9790e3935bc81150adb54a5d5a3fa692
Size/MD5 checksum: 8220 59438319c03603473e174c61009b0d7c
Size/MD5 checksum: 69235 0b8553db414dac4c43b9f9282f8e149c

Architecture independent components:

S...

Read the Full Advisory

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory remote exploit debian format string DoS package upgrade libnet-server-perl

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.