Stay Secure with the Latest Linux Advisories

security advisorybuffer overflowcritical

Debian: DSA-2425-1 Critical: PLIB Buffer Overflow Remote Code Execution

It was discovered that PLIB, a library used by TORCS, contains a buffer overflow in error message processing, which could allow remote attackers to execute arbitrary code. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2425-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Florian Weimer March 04, 2012 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : plib Vulnerability : buffer overflow Problem type : remote Debian-specific: no CVE ID : CVE-2011-4620 Debian Bug : 654785 It was discovered that PLIB, a library used by TORCS, contains a buffer overflow in error message processing, which could allow remote attackers to execute arbitrary code. For the stable distribution (squeeze), this problem has been fixed in version 1.8.5-5+squeeze1. For the testing distribution (wheezy) and the unstable distribution (sid), this problem has been fixed in version 1.8.5-5.1. We recommend that you upgrade your plib packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . A critical vulnerability in PLIB allows remote arbitrary code execution within Debian's TORCS framework. Immediate patching suggested.. Debian Security, PLIB Risk, TORCS Library Flaw, Remote Code Execution. . Severity: Critical. LinuxSecurity.com Team

Mar 04, 2012 •Critical Debian