Bugtraq mailing list archives
[RHSA-2000:008-01] ircii buffer overflow
From: bugzilla () REDHAT COM (bugzilla () REDHAT COM)
Date: Thu, 30 Mar 2000 11:41:00 -0500
--------------------------------------------------------------------- Red Hat, Inc. Security Advisory Synopsis: ircii buffer overflow Advisory ID: RHSA-2000:008-01 Issue date: 2000-03-29 Updated on: 2000-03-29 Product: Red Hat Linux Keywords: N/A Cross references: ircii 4.4M buffer dcc --------------------------------------------------------------------- 1. Topic: A buffer overflow exists in ircii, 2. Relevant releases/architectures: Red Hat Linux 4.2 - i386 alpha sparc Red Hat Linux 5.2 - i386 alpha sparc Red Hat Linux 6.0 - i386 alpha sparc Red Hat Linux 6.1 - i386 alpha sparc Red Hat Linux 6.2 - i386 sparc 3. Problem description: A buffer overflow exists in ircii's dcc chat capability. An attacker could use this overflow to execute code as the user of ircii. It is recommended that users of ircii update to the fixed pacakges: Compatibility note: ircii's library directory has moved from /usr/lib/irc to /usr/share/irc. 4. Solution: For each RPM for your particular architecture, run: rpm -Fvh [filename] where filename is the name of the RPM. 5. Bug IDs fixed (http://bugzilla.redhat.com/bugzilla for more info): 10339 - ircii overflow bug. please upgrade ircii. again. 6. Obsoleted by: N/A 7. Conflicts with: N/A 8. RPMs required: Red Hat Linux 4.2: intel: ftp://updates.redhat.com/4.2/i386/ircii-4.4M-0.4.2.i386.rpm alpha: ftp://updates.redhat.com/4.2/alpha/ircii-4.4M-0.4.2.alpha.rpm sparc: ftp://updates.redhat.com/4.2/sparc/ircii-4.4M-0.4.2.sparc.rpm sources: ftp://updates.redhat.com/4.2/SRPMS/ircii-4.4M-0.4.2.src.rpm Red Hat Linux 5.2: intel: ftp://updates.redhat.com/5.2/i386/ircii-4.4M-0.5.2.i386.rpm alpha: ftp://updates.redhat.com/5.2/alpha/ircii-4.4M-0.5.2.alpha.rpm sparc: ftp://updates.redhat.com/5.2/sparc/ircii-4.4M-0.5.2.sparc.rpm sources: ftp://updates.redhat.com/5.2/SRPMS/ircii-4.4M-0.5.2.src.rpm Red Hat Linux 6.2: intel: ftp://updates.redhat.com/6.2/i386/ircii-4.4M-1.i386.rpm sparc: ftp://updates.redhat.com/6.2/sparc/ircii-4.4M-1.sparc.rpm sources: ftp://updates.redhat.com/6.2/SRPMS/ircii-4.4M-1.src.rpm 9. Verification: MD5 sum Package Name -------------------------------------------------------------------------- e9cb2195648bf1cc55e00b28f98b090e 5.2/sparc/ircii-4.4M-0.5.2.sparc.rpm 73c9eb162c48a162c2f5ef8c625fba53 4.2/i386/ircii-4.4M-0.4.2.i386.rpm e44491fe29858c1884196a0cd40fc60d 6.2/i386/ircii-4.4M-1.i386.rpm 324779062a29903f3c2fff581c620425 5.2/i386/ircii-4.4M-0.5.2.i386.rpm dfed6e42c23064d6b6af88b83c45d67d 4.2/alpha/ircii-4.4M-0.4.2.alpha.rpm 122d90adde4e18db9f7c69143a4334e1 4.2/SRPMS/ircii-4.4M-0.4.2.src.rpm 95c765b3fb7c76dc7d2de1fe1853e3ca 6.2/SRPMS/ircii-4.4M-1.src.rpm ca748c0df16cda0de83c21b53eb48351 5.2/alpha/ircii-4.4M-0.5.2.alpha.rpm a14830ab1d939150e7cb38ab57eecfed 5.2/SRPMS/ircii-4.4M-0.5.2.src.rpm be7db62bbab9c34801f7c1e08983f34e 4.2/sparc/ircii-4.4M-0.4.2.sparc.rpm a759d5ea66514b4e12e59a8c173d65d9 6.2/sparc/ircii-4.4M-1.sparc.rpm These packages are GPG signed by Red Hat, Inc. for security. Our key is available at: http://www.redhat.com/corp/contact.html You can verify each package with the following command: rpm --checksig <filename> If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command: rpm --checksig --nogpg <filename> 10. References: http://www.securityfocus.com/vdb/bottom.html?vid=1046
Current thread:
- Re: gpm-root, (continued)
- Re: gpm-root ADAM Sulmicki (Mar 22)
- Trend Micro releases Patch for "OfficeScan Unauthenticated CGI U sage" vulnerability Richard Sheng (Mar 22)
- Re: gpm-root Koblinger Egmont (Mar 23)
- Local Denial-of-Service attack against Linux Jay Fenlason (Mar 23)
- Re: Local Denial-of-Service attack against Linux Michal Zalewski (Mar 24)
- Re: Local Denial-of-Service attack against Linux dapozza (Mar 24)
- Hide Drives does not work with OUTLOOK 98 - Summary of Answers (W InNT4) DeAvillez, Carlos (Mar 24)
- Windows 2000 Internet Server Security Configuration Tool Microsoft Security Response Center (Mar 24)
- Irix Objectserver remote exploit Marcy Abene (Mar 29)
- New ZZ v1.2 Simple Nomad (Mar 29)
- [RHSA-2000:008-01] ircii buffer overflow bugzilla () REDHAT COM (Mar 30)
- Microsoft Security Bulletin (MS00-019) Microsoft Product Security (Mar 30)
- Microsoft Security Bulletin (MS00-021) Microsoft Product Security (Mar 30)
- Napster, Inc. response to Colten Edwards Elias Levy (Mar 30)
- Cobalt apache configuration exposes .htaccess Paul Schreiber (Mar 30)
- Re: Napster, Inc. response to Colten Edwards Danny Crawford (Mar 30)
- Re: Napster, Inc. response to Colten Edwards Dylan Griffiths (Mar 30)
- Alert: MS Index Server (CISADV000330) Cerberus Security Team (Mar 30)
- Webstar 4.0 Buffer overflow vulnerability Ilhom Djalilov (Mar 31)
- Microsoft Security Bulletin (MS00-006) Microsoft Product Security (Mar 31)
- [ Cobalt ] Security Advisory -- 03.31.2000 Jeff Lovell (Mar 31)
- Re: gpm-root ADAM Sulmicki (Mar 22)