Debians sikkerhedsbulletin

DSA-035-1 man2html -- fjern-overbelastningsangreb

Rapporteret den:

7. mar 2001

Berørte pakker:

man2html

Sårbar:

Referencer i sikkerhedsdatabaser:

I Debians fejlsporingssystem: Fejl 28024, Fejl 78195.
I Mitres CVE-ordbog: CVE-2001-0457.

Yderligere oplysninger:

Det er blevet rapporteret at en fjern-bruger kan få man2html at bruge al tilgængelig hukommelse. Dette er rettet af Nicolás Lichtmaier med hjælp fra Stephan Kulow.

Vi anbefaler at du omgående opgraderer din man2html-pakke.

Rettet i:

Debian 2.2 (potato)

Kildekode:: http://security.debian.org/dists/stable/updates/main/source/man2html_1.5.orig.tar.gz; http://security.debian.org/dists/stable/updates/main/source/man2html_1.5-23.dsc; http://security.debian.org/dists/stable/updates/main/source/man2html_1.5-23.diff.gz
alpha:: http://security.debian.org/dists/stable/updates/main/binary-alpha/man2html_1.5-23_alpha.deb
arm:: http://security.debian.org/dists/stable/updates/main/binary-arm/man2html_1.5-23_arm.deb
i386:: http://security.debian.org/dists/stable/updates/main/binary-i386/man2html_1.5-23_i386.deb
m68k:: http://security.debian.org/dists/stable/updates/main/binary-m68k/man2html_1.5-23_m68k.deb
powerpc:: http://security.debian.org/dists/stable/updates/main/binary-powerpc/man2html_1.5-23_powerpc.deb
sparc:: http://security.debian.org/dists/stable/updates/main/binary-sparc/man2html_1.5-23_sparc.deb