Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

Red Hat 6.0 RHSA-1999:037-01 Moderate: Mars_NWE Buffer Overflow Exploit

red hat
Calendar Grey December 7, 1999
Dist Redhat Esm H88
The latest Red Hat bulletin discusses vulnerabilities in mars_nwe regarding buffer overflow issues, highlighting potential exploitation threats along with recommended corrective measures.
There are several buffer overruns in the mars_nwe package

Solution



For each RPM for your particular architecture, run:


rpm -Uvh filename


where filename is the name of the RPM.

9. Verification:


 MD5 sum                           Package Name

adbd809d9de3d22fed637bcf56ede66f  i386/mars-nwe-0.99pl17-4.i386.rpm
729f888a3c1ebb87bcf04c204bf7b9dc  alpha/mars-nwe-0.99pl17-4.alpha.rpm
bf73f67c225c2edce4d7ee52b5796803  sparc/mars-nwe-0.99pl17-4.sparc.rpm
b9c61129b2e04d25c48863ededc35568  SRPMS/mars-nwe-0.99pl17-4.src.rpm

These packages are also PGP signed by Red Hat Inc. for security. Our

key is available at:





You can verify each package with the following command:


rpm --checksig filename


If you only wish to verify that each package has not been corrupted or

tampered with, examine only the md5sum with the following command:


rpm --checksig --nopgp filename







Summary

Topics%20covered

Topics Covered

security advisory Red Hat buffer overflow mars_nwe moderate threat

References

Bugtraq ID: 617 <19990830200449.54656.qmail@lagoon.freebsd.lublin.pl> 19990830200449.54656.qmail@lagoon.freebsd.lublin.pl


Package List


Severity
important
Lowest
Low
Medium
High
Critical

Topic

Topics%20covered

Topics Covered

security advisory Red Hat buffer overflow mars_nwe moderate threat

Relevant Releases Architectures

Red Hat Linux 6.0, all architectures

4. Obsoleted by:

None

5. Conflicts with:

None

6. RPMs required:

Intel:

mars-

nwe-0.99pl17-4.i386.rpm

Alpha:

mars-nwe-0.99pl17-4.alpha.rpm

SPARC:

mars-nwe-0.99pl17-4.sparc.rpm

Source:

mars-

nwe-0.99pl17-4.src.rpm

Architecture neutral:

Bugs Fixed

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here