Stay Secure with the Latest Linux Advisories

security advisorybuffer overflowcritical

Debian 2.2: DSA-063-1 Critical: xinetd Buffer Overflow and Umask Issue

A buffer overflow condition and insecure umask mode vulnerabilities have been fixed.. ------------------------------------------------------------------------ Debian Security Advisory DSA-063-1 This email address is being protected from spambots. You need JavaScript enabled to view it. Debian -- Security Information Wichert Akkerman June 17, 2001 ------------------------------------------------------------------------ Package : xinetd Problem type : change default umask buffer overflow Debian-specific: no zen-parse reported on bugtraq that there is a possible buffer overflow in the logging code from xinetd. This could be triggered by using a fake identd that returns special replies when xinetd does an ident request. Another problem is that xinetd sets it umask to 0. As a result any programs that xinetd start that are not careful with file permissions will create world-writable files. Both problems have been fixed in version 2.1.8.8.p3-1.1 . wget url will fetch the file for you dpkg -i file.deb will install the referenced file. Debian GNU/Linux 2.2 alias potato --------------------------------- Potato was released for alpha, arm, i386, m68k, powerpc and sparc. Source archives: MD5 checksum: 457150cded692f00e76c73c8ae7787d1 MD5 checksum: c3c9764680b907c382904aa1e5ba32b0 MD5 checksum: 5d1f4d5bab29d9e68dc8850b4cb90969 Alpha architecture: MD5 checksum: e43231b79cf899e89b9c8e98cb9a3473 ARM architecture: MD5 checksum: 107e82971903932f9f6deb5b5db53000 Intel IA-32 architecture: MD5 checksum: 94aff2d70ce4032527b61ef5fe2bf623 Motorola 680x0 architecture: MD5 checksum: 53627cdca29cfd395b5413bf893652cf PowerPC architecture: MD5 checksum: 0707a506c810aff814acaef7e6188527 Sun Sparc architecture: MD5 checksum: e93d159f968dc41c4244f1b27e023646 These packages will be moved into the stable distribution on its next revision. For not yet releasedarchitectures please refer to the appropriate directory . -- ---------------------------------------------------------------------------- apt-get: deb Debian -- Security Information stable/updates main dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Recent updates for xinetd address urgent security flaws, notably a dangerous buffer overflow and improper umask configurations for Debian systems.. xinetd vulnerabilities, Debian Security Advisory, buffer overflow fix. . Severity: Critical. LinuxSecurity.com Team

Jun 18, 2001 •Critical Debian