Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Gentoo: 2004-11-20 High: ez-ipupdate Format String Threat

gentoo
Calendar Grey November 11, 2004
Scroller Gentoo
Security Notice GLSA 200501-10: net-tools has a buffer overflow vulnerability permitting unauthorized command execution.
ez-ipupdate contains a format string vulnerability that could lead to execution of arbitrary code.

Summary

Gentoo Linux Security Advisory GLSA 200411-20 https://security.gentoo.org/ Severity: High Title: ez-ipupdate: Format string vulnerability Date: November 11, 2004 Bugs: #69658 ID: 200411-20

Synopsis ======= ez-ipupdate contains a format string vulnerability that could lead to execution of arbitrary code.
Background ========= ez-ipupdate is a utility for updating host name information for a large number of dynamic DNS services.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-dns/ez-ipupdate <= 3.0.11_beta8 >= 3.0.11_beta8-r1
========== Ulf Harnhammar from the Debian Security Audit Project discovered a format string vulnerability in ez-ipupdate.
Impact ===== An attacker could exploit this to exe...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory high severity security issue gentoo format string arbitrary code execution ez-ipupdate

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory high severity security issue gentoo format string arbitrary code execution ez-ipupdate

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround