Debian: New typespeed packages fix arbitrary code execution

    Date31 May 2006
    CategoryDebian
    5316
    Posted ByLinuxSecurity Advisories
    Niko Tyni discovered a buffer overflow in the processing of network data in typespeed, a game for testing and improving typing speed, which could lead to the execution of arbitrary code.
    - --------------------------------------------------------------------------
    Debian Security Advisory DSA 1084-1                    This email address is being protected from spambots. You need JavaScript enabled to view it.
    http://www.debian.org/security/                                 Steve Kemp
    May 31st, 2006                          http://www.debian.org/security/faq
    - --------------------------------------------------------------------------
    
    Package        : typespeed
    Vulnerability  : buffer overflow
    Problem type   : remote
    Debian-specific: no
    CVE ID         : CVE-2006-1515
    
    Niko Tyni discovered a buffer overflow in the processing of network
    data in typespeed, a game for testing and improving typing speed, which
    could lead to the execution of arbitrary code.
    
    For the old stable distribution (woody) this problem has been fixed in
    version 0.4.1-2.4.
    
    For the stable distribution (sarge) this problem has been fixed in
    version 0.4.4-8sarge1.
    
    For the unstable distribution (sid) this problem has been fixed in
    version 0.4.4-10.
    
    We recommend that you upgrade your typespeed packages.
    
    
    Upgrade Instructions
    - --------------------
    
    wget url
            will fetch the file for you
    dpkg -i file.deb
            will install the referenced file.
    
    If you are using the apt-get package manager, use the line for
    sources.list as given at the end of this advisory:
    
    apt-get update
            will update the internal database
    apt-get upgrade
            will install corrected packages
    
    You may use an automated update by adding the resources from the
    footer to the proper configuration.
    
    
    Debian GNU/Linux 3.0 alias woody
    - --------------------------------
    
      Source archives:
    
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.1-2.4.dsc
          Size/MD5 checksum:      575 dde5c050b1e67ffe4514b9dedce6b7fc
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.1-2.4.diff.gz
          Size/MD5 checksum:     8612 c431a405c883545c348dad82ff0c5128
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.1.orig.tar.gz
          Size/MD5 checksum:    35492 0af9809cd20bd9010732ced930090f32
    
      Alpha architecture:
    
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.1-2.4_alpha.deb
          Size/MD5 checksum:    44616 e12714bb06b857244da1dd39bdb17a6e
    
      ARM architecture:
    
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.1-2.4_arm.deb
          Size/MD5 checksum:    39268 e6652cd262056a06c92c9a6715033ec5
    
      Intel IA-32 architecture:
    
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.1-2.4_i386.deb
          Size/MD5 checksum:    39006 e69aa8f0bad65aa5f8b85792b5ea63be
    
      Intel IA-64 architecture:
    
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.1-2.4_ia64.deb
          Size/MD5 checksum:    50214 d09c640908ada757a3d37980ea80d6fd
    
      HP Precision architecture:
    
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.1-2.4_hppa.deb
          Size/MD5 checksum:    42168 2b14f1071f09ec1a8a20f1cd62a17654
    
      Motorola 680x0 architecture:
    
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.1-2.4_m68k.deb
          Size/MD5 checksum:    37690 79068703c63e95c32d0e9a732065a42b
    
      Big endian MIPS architecture:
    
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.1-2.4_mips.deb
          Size/MD5 checksum:    41270 222ba830c5e6d37ee7a9458a84a52074
    
      Little endian MIPS architecture:
    
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.1-2.4_mipsel.deb
          Size/MD5 checksum:    41324 e229b337a3d761192afc307931d6310e
    
      PowerPC architecture:
    
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.1-2.4_powerpc.deb
          Size/MD5 checksum:    41550 02b214201c33b7f678749f56414f6853
    
      IBM S/390 architecture:
    
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.1-2.4_s390.deb
          Size/MD5 checksum:    39120 9d72d98cd5b59e79dc71f5cdd5bffa00
    
      Sun Sparc architecture:
    
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.1-2.4_sparc.deb
          Size/MD5 checksum:    43222 1091af6dcd4e56c43a8b981ed2668105
    
    
    Debian GNU/Linux 3.1 alias sarge
    - --------------------------------
    
      Source archives:
    
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.4-8sarge1.dsc
          Size/MD5 checksum:      596 6e67253c4c56b5709eb5829cf4a632c8
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.4-8sarge1.diff.gz
          Size/MD5 checksum:     6758 6a41c5d37ffca328987e7197adad8e4a
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.4.orig.tar.gz
          Size/MD5 checksum:    38526 97ca3e3d0323c41ecc4f453f557287ea
    
      Alpha architecture:
    
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.4-8sarge1_alpha.deb
          Size/MD5 checksum:    48440 6ff82fd7eedb568a2be2f5c4700684d1
    
      AMD64 architecture:
    
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.4-8sarge1_amd64.deb
          Size/MD5 checksum:    44794 a3445610ea2b592e8645ac5b48594c59
    
      ARM architecture:
    
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.4-8sarge1_arm.deb
          Size/MD5 checksum:    42730 6cf403893027e9bedb7595633bc7a5bf
    
      Intel IA-32 architecture:
    
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.4-8sarge1_i386.deb
          Size/MD5 checksum:    43658 2a94279891b65dbb7210b171f1c53eea
    
      Intel IA-64 architecture:
    
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.4-8sarge1_ia64.deb
          Size/MD5 checksum:    51616 eb4684a919ac5de384d38f47354a80da
    
      HP Precision architecture:
    
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.4-8sarge1_hppa.deb
          Size/MD5 checksum:    45626 062d5c56ef74f9e10360deca3ffc68ce
    
      Motorola 680x0 architecture:
    
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.4-8sarge1_m68k.deb
          Size/MD5 checksum:    40800 ed5e4fac0988dee0bbfee83ab13de297
    
      Big endian MIPS architecture:
    
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.4-8sarge1_mips.deb
          Size/MD5 checksum:    44558 822e562fa01e8a7563eb18a08a425005
    
      Little endian MIPS architecture:
    
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.4-8sarge1_mipsel.deb
          Size/MD5 checksum:    44676 1c843ae3509f4544a58b3b0c912391bc
    
      PowerPC architecture:
    
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.4-8sarge1_powerpc.deb
          Size/MD5 checksum:    46168 fd09deb94f21912eeb2f128057be6b48
    
      IBM S/390 architecture:
    
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.4-8sarge1_s390.deb
          Size/MD5 checksum:    43568 ca68bf775e8175a4706b684ef13ca25b
    
      Sun Sparc architecture:
    
        http://security.debian.org/pool/updates/main/t/typespeed/typespeed_0.4.4-8sarge1_sparc.deb
          Size/MD5 checksum:    43240 b6ef1046141a03b80d9f188a9f4d5a5a
    
    
      These files will probably be moved into the stable distribution on
      its next update.
    
    - ---------------------------------------------------------------------------------
    For apt-get: deb http://security.debian.org/ stable/updates main
    For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
    Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it.
    
    You are not authorised to post comments.

    Comments powered by CComment

    LinuxSecurity Poll

    What do you think of the articles on LinuxSecurity?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 3 answer(s).
    /main-polls/24-what-do-you-think-of-the-quality-of-the-articles-on-linuxsecurity?task=poll.vote&format=json
    24
    radio
    [{"id":"87","title":"Excellent, don't change a thing!","votes":"4","type":"x","order":"1","pct":57.14,"resources":[]},{"id":"88","title":"Should be more technical","votes":"2","type":"x","order":"2","pct":28.57,"resources":[]},{"id":"89","title":"Should include more HOWTOs","votes":"1","type":"x","order":"3","pct":14.29,"resources":[]}]["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"]["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"]350
    bottom200

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.