Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Gentoo: 200712-18 High: DAAP Daemon Remote Code Execution Threat

gentoo
Calendar Grey December 29, 2007
Scroller Gentoo
Gentoo GLSA 200712-19 discusses several security flaws in the Multi-Threaded HTTP Server, leading to potential remote code execution risks.
Multiple vulnerabilities in the web server in the Multi-Threaded DAAP Daemon may lead to the remote execution of arbitrary code.

Summary

Gentoo Linux Security Advisory GLSA 200712-18 https://security.gentoo.org/ Severity: High Title: Multi-Threaded DAAP Daemon: Multiple vulnerabilities Date: December 29, 2007 Bugs: #200110 ID: 200712-18

Synopsis ======= Multiple vulnerabilities in the web server in the Multi-Threaded DAAP Daemon may lead to the remote execution of arbitrary code.
Background ========= Multi-Threaded DAAP Daemon (mt-daapd), also known as the Firefly Media Server, is a software to serve digital music to the Roku Soundbridge and Apple's iTunes.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-sound/mt-daapd < 0.2.4.1 >= 0.2.4.1
========== nnp discovered multiple vulnerabilities...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory high severity gentoo remote code execution multi-threaded daap daemon xml-rpc issues

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory high severity gentoo remote code execution multi-threaded daap daemon xml-rpc issues

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround