Aviso de seguridad de Debian

canna server -- desbordamiento de búfer

Fecha del informe:

1 de jul de 2000

Paquetes afectados:

canna

Vulnerable:

Sí

Referencias a bases de datos de seguridad:

En el diccionario CVE de Mitre: CVE-2000-0584.

Información adicional:

El paquete canna distribuído en Debian GNU/Linux 2.1 puede ser explotado remotamente para obtener acceso. Esto podía hacerse mediante un desbordamiento de búfer enviando un comando SR_INIT con un nombre de usuario o de grupo muy largo.

Esto ha sido arreglado en la versión 3.5b2-24slink1, y le recomendamos que actualice su paquete canna inmediatamente.

Arreglado en:

Fuentes:: http://security.debian.org/dists/slink/updates/source/canna_3.5b2-24slink1.diff.gz; http://security.debian.org/dists/slink/updates/source/canna_3.5b2-24slink1.dsc; http://security.debian.org/dists/slink/updates/source/canna_3.5b2.orig.tar.gz
alpha:: http://security.debian.org/dists/slink/updates/binary-alpha/canna-utils_3.5b2-24slink1_alpha.deb; http://security.debian.org/dists/slink/updates/binary-alpha/canna_3.5b2-24slink1_alpha.deb; http://security.debian.org/dists/slink/updates/binary-alpha/libcanna1g-dev_3.5b2-24slink1_alpha.deb; http://security.debian.org/dists/slink/updates/binary-alpha/libcanna1g_3.5b2-24slink1_alpha.deb
i386:: http://security.debian.org/dists/slink/updates/binary-i386/canna-utils_3.5b2-24slink1_i386.deb; http://security.debian.org/dists/slink/updates/binary-i386/canna_3.5b2-24slink1_i386.deb; http://security.debian.org/dists/slink/updates/binary-i386/libcanna1g-dev_3.5b2-24slink1_i386.deb; http://security.debian.org/dists/slink/updates/binary-i386/libcanna1g_3.5b2-24slink1_i386.deb
m68k:: http://security.debian.org/dists/slink/updates/binary-m68k/canna-utils_3.5b2-24slink1_m68k.deb; http://security.debian.org/dists/slink/updates/binary-m68k/canna_3.5b2-24slink1_m68k.deb; http://security.debian.org/dists/slink/updates/binary-m68k/libcanna1g-dev_3.5b2-24slink1_m68k.deb; http://security.debian.org/dists/slink/updates/binary-m68k/libcanna1g_3.5b2-24slink1_m68k.deb
sparc:: http://security.debian.org/dists/slink/updates/binary-sparc/canna-utils_3.5b2-24slink1_sparc.deb; http://security.debian.org/dists/slink/updates/binary-sparc/canna_3.5b2-24slink1_sparc.deb; http://security.debian.org/dists/slink/updates/binary-sparc/libcanna1g-dev_3.5b2-24slink1_sparc.deb; http://security.debian.org/dists/slink/updates/binary-sparc/libcanna1g_3.5b2-24slink1_sparc.deb