Gentoo: canna multiple vulnerabilities
A heap overflow vulnerability was discovered in the irw_through function in canna server version 3.6 and earlier.
Summary
- -------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT 200212-8 - -------------------------------------------------------------------- DATE : 2002-12-20 17:12 UTC
- --------------------------------------------------------------------
Quotes from advisory:
"hsj" of Shadow Penguin Security discovered a heap overflow vulnerability in the irw_through function in canna server version 3.6 and earlier."
"AIDA Shinra of Canna project found lack of validations of requests in canna version 3.6 and earlier."
Read the full advisory at
SOLUTION
It is recommended that all Gentoo Linux users who are running app-i18n/canna-3.6 and earlier update their systems as follows:
emerge rsync emerge canna emerge clean
- -------------------------------------------------------------------- aliz@gentoo.org - GnuPG key is available at nakano@gentoo.org - --------------------------------------------------------------------
Resolution
References
Availability
Concerns
Severity
PACKAGE : canna
SUMMARY : multiple vulnerabilities in canna
EXPLOIT : remote
