Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Gentoo: GLSA-200406-02 High: Tripwire Code Execution Risk

gentoo
Calendar Grey June 4, 2004
Scroller Gentoo
Gentoo Linux Advisory GLSA 200407-01 highlights a critical buffer overflow issue in rsync that allows unauthorized command execution.
A vulnerability allowing arbitrary code execution under certain circumstances has been found.

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200406-02
                                            https://security.gentoo.org/

  Severity: High
     Title: tripwire: Format string vulnerability
      Date: June 04, 2004
      Bugs: #52945
        ID: 200406-02


Synopsis
=======
A vulnerability allowing arbitrary code execution under certain
circumstances has been found.

Background
=========
tripwire is an open source file integrity checker.

Affected packages
================
    -------------------------------------------------------------------
     Package             /   Vulnerable   /                 Unaffected
    -------------------------------------------------------------------
  1  app-admin/tripwire      <= 2.3.1.2                  >= 2.3.1.2-r1

==========
The code that generates email reports contains a format string
vulnerability in pipedmailmessage.cpp.

Impact
=====
With a carefully crafted filename on...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory high severity update gentoo code execution format string tripwire

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory high severity update gentoo code execution format string tripwire

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround