Debians sikkerhedsbulletin

DSA-289-1 rinetd -- ukorrekt ændring hukommelsesstørrelse

Rapporteret den:

17. apr 2003

Berørte pakker:

rinetd

Sårbar:

Referencer i sikkerhedsdatabaser:

I Bugtraq-databasen (hos SecurityFocus): BugTraq-id 7377.
I Mitres CVE-ordbog: CVE-2003-0212.

Yderligere oplysninger:

Sam Hocevar har opdaget et sikkerhedsproblem i rinetd, en server til omdirigering af IP-forbindelser. Når forbindelseslisten er fyldt op, ændrer rinetd størrelsen på listen, for at få plads til nye indkommende forbindelser. Men dette gøres på en forkert måde, hvilket resulterer i et lammelsesangreb og udførelse af vilkårlig kode.

I den stabile distribution (woody) er dette problem rettet i version 0.61-1.1.

I den gamle stabile distribution (potato) er dette problem rettet i version 0.52-2.1.

I den ustabile distribution (sid) er dette problem rettet i version 0.61-2

Vi anbefaler at du opgraderer din rinetd-pakke.

Rettet i:

Debian GNU/Linux 2.2 (potato)

Kildekode:: http://security.debian.org/pool/updates/main/r/rinetd/rinetd_0.52-2.1.dsc; http://security.debian.org/pool/updates/main/r/rinetd/rinetd_0.52-2.1.diff.gz; http://security.debian.org/pool/updates/main/r/rinetd/rinetd_0.52.orig.tar.gz
Alpha:: http://security.debian.org/pool/updates/main/r/rinetd/rinetd_0.52-2.1_alpha.deb
ARM:: http://security.debian.org/pool/updates/main/r/rinetd/rinetd_0.52-2.1_arm.deb
Intel IA-32:: http://security.debian.org/pool/updates/main/r/rinetd/rinetd_0.52-2.1_i386.deb
Motorola 680x0:: http://security.debian.org/pool/updates/main/r/rinetd/rinetd_0.52-2.1_m68k.deb
PowerPC:: http://security.debian.org/pool/updates/main/r/rinetd/rinetd_0.52-2.1_powerpc.deb
Sun Sparc:: http://security.debian.org/pool/updates/main/r/rinetd/rinetd_0.52-2.1_sparc.deb

Debian GNU/Linux 3.0 (woody)

Kildekode:: http://security.debian.org/pool/updates/main/r/rinetd/rinetd_0.61-1.1.dsc; http://security.debian.org/pool/updates/main/r/rinetd/rinetd_0.61-1.1.diff.gz; http://security.debian.org/pool/updates/main/r/rinetd/rinetd_0.61.orig.tar.gz
Alpha:: http://security.debian.org/pool/updates/main/r/rinetd/rinetd_0.61-1.1_alpha.deb
ARM:: http://security.debian.org/pool/updates/main/r/rinetd/rinetd_0.61-1.1_arm.deb
Intel IA-32:: http://security.debian.org/pool/updates/main/r/rinetd/rinetd_0.61-1.1_i386.deb
Intel IA-64:: http://security.debian.org/pool/updates/main/r/rinetd/rinetd_0.61-1.1_ia64.deb
HPPA:: http://security.debian.org/pool/updates/main/r/rinetd/rinetd_0.61-1.1_hppa.deb
Motorola 680x0:: http://security.debian.org/pool/updates/main/r/rinetd/rinetd_0.61-1.1_m68k.deb
Big endian MIPS:: http://security.debian.org/pool/updates/main/r/rinetd/rinetd_0.61-1.1_mips.deb
Little endian MIPS:: http://security.debian.org/pool/updates/main/r/rinetd/rinetd_0.61-1.1_mipsel.deb
PowerPC:: http://security.debian.org/pool/updates/main/r/rinetd/rinetd_0.61-1.1_powerpc.deb
IBM S/390:: http://security.debian.org/pool/updates/main/r/rinetd/rinetd_0.61-1.1_s390.deb
Sun Sparc:: http://security.debian.org/pool/updates/main/r/rinetd/rinetd_0.61-1.1_sparc.deb

MD5-kontrolsummer for de listede filer findes i den originale sikkerhedsbulletin.