82190 2002-10-23 20:52 /113 rader/ <security@caldera.com> Importerad: 2002-10-23 20:52 av Brevbäraren Extern mottagare: bugtraq@securityfocus.com Extern mottagare: announce@lists.caldera.com Extern mottagare: security-alerts@linuxsecurity.com Extern mottagare: full-disclosure@lists.netsys.com Externa svar till: please_reply_to_security@caldera.com Mottagare: Bugtraq (import) <2086> Ärende: Security Update: [CSSA-2002-036.0] Linux: remote buffer overflow in webalizer reverse lookup code ------------------------------------------------------------ To: bugtraq@securityfocus.com announce@lists.caldera.com security-alerts@linuxsecurity.com full-disclosure@lists.netsys.com ______________________________________________________________________________ SCO Security Advisory Subject: Linux: remote buffer overflow in webalizer reverse lookup code Advisory number: CSSA-2002-036.0 Issue date: 2002 October 22 Cross reference: ______________________________________________________________________________ 1. Problem Description The webalizer program will perform reverse DNS lookups. Using a buffer overflow in this reverse lookup code, an attacker with a rogue DNS server can gain root access to the machine running webalizer. 2. Vulnerable Supported Versions System Package ---------------------------------------------------------------------- OpenLinux 3.1.1 Server prior to webalizer-2.01_09-2.i386.rpm OpenLinux 3.1 Server prior to webalizer-2.01_09-2.i386.rpm 3. Solution The proper solution is to install the latest packages. Many customers find it easier to use the Caldera System Updater, called cupdate (or kcupdate under the KDE environment), to update these packages rather than downloading and installing them by hand. 4. OpenLinux 3.1.1 Server 4.1 Package Location ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2002-036.0/RPMS 4.2 Packages db8c5037801e807a6138f2fd5e3cf284 webalizer-2.01_09-2.i386.rpm 4.3 Installation rpm -Fvh webalizer-2.01_09-2.i386.rpm 4.4 Source Package Location ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2002-036.0/SRPMS 4.5 Source Packages 03e6b22634832fd3cd1752318f1d83d4 webalizer-2.01_09-2.src.rpm 5. OpenLinux 3.1 Server 5.1 Package Location ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Server/CSSA-2002-036.0/RPMS 5.2 Packages 258245a154ba0b220b56cde31b2e3c7d webalizer-2.01_09-2.i386.rpm 5.3 Installation rpm -Fvh webalizer-2.01_09-2.i386.rpm 5.4 Source Package Location ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Server/CSSA-2002-036.0/SRPMS 5.5 Source Packages fef58e3e929062180bf1bc6ad885925e webalizer-2.01_09-2.src.rpm 6. References Specific references for this advisory: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-0180 SCO security resources: http://www.sco.com/support/security/index.html This security fix closes SCO incidents sr863733, fz520840, erg712035. 7. Disclaimer SCO is not responsible for the misuse of any of the information we provide on this website and/or through our security advisories. Our advisories are a service to our customers intended to promote secure installation and use of SCO products. 8. Acknowledgements Spybreak (spybreak@host.sk) discovered and researched this vulnerability. ______________________________________________________________________________ (82190) / <security@caldera.com>/---------(Ombruten) Bilaga (application/pgp-signature) i text 82191 82191 2002-10-23 20:52 /9 rader/ <security@caldera.com> Importerad: 2002-10-23 20:52 av Brevbäraren Extern mottagare: bugtraq@securityfocus.com Extern mottagare: announce@lists.caldera.com Extern mottagare: security-alerts@linuxsecurity.com Extern mottagare: full-disclosure@lists.netsys.com Externa svar till: please_reply_to_security@caldera.com Mottagare: Bugtraq (import) <2087> Bilaga (text/plain) till text 82190 Ärende: Bilaga till: Security Update: [CSSA-2002-036.0] Linux: remote buffer overflow in webalizer reverse lookup code ------------------------------------------------------------ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (SCO_SV) Comment: For info see http://www.gnupg.org iEYEARECAAYFAj2235EACgkQbluZssSXDTEdNQCeKjUtNy2cNBM3ApSprTaVHQeA EV4AoNO1lSQ6EXhJ3AS5knIaMiTvoqbQ =QpfT -----END PGP SIGNATURE----- (82191) / <security@caldera.com>/-------------------