11104258 2003-12-14 15:46 -0500 /47 rader/ Kurt Lieber <klieber@gentoo.org>
Importerad: 2003-12-15 22:16 av Brevbäraren
Extern mottagare: bugtraq@securityfocus.com
Mottagare: Bugtraq (import) <30353>
Ärende: GLSA: Malformed dcc send requests in xchat-2.0.6 lead to a denial of service
------------------------------------------------------------
From: Kurt Lieber <klieber@gentoo.org>
To: bugtraq@securityfocus.com
Message-ID: <20031214204610.GV6559@mail.lieber.org>
---------------------------------------------------------------------------
GENTOO LINUX SECURITY ANNOUNCEMENT 200312-06
---------------------------------------------------------------------------
GLSA: 200312-06
Package: net-irc/xchat
Summary: Malformed dcc send requests in xchat-2.0.6 lead to a denial of
service
Severity: medium
Gentoo bug: 35623
Date: 2003-12-14
CVE: none
Exploit: remote
Affected: =2.0.6
Fixed: >=2.0.6-r1
DESCRIPTION:
There is a remotely exploitable bug in xchat 2.0.6 that could lead to
a denial of service attack. This is caused by sending a malformed
DCC packet to xchat 2.0.6, causing it to crash. Versions prior to
2.0.6 do not appear to be affected by this bug.
For more information, please see:
http://mail.nl.linux.org/xchat-announce/2003-12/msg00000.html
SOLUTION:
For Gentoo users, xchat-2.0.6 was marked ~arch (unstable) for most
architectures. Since it was never marked as stable in the portage
tree, only xchat users who have explictly added the unstable keyword
to ACCEPT_KEYWORDS are affected. Users may updated affected machines
to the patched version of xchat using the following commands:
emerge sync
emerge -pv '>=net-irc/xchat-2.0.6-r1'
emerge '>=net-irc/xchat-2.0.6-r1'
emerge clean
(11104258) /Kurt Lieber <klieber@gentoo.org>/(Ombruten)
Bilaga (application/pgp-signature) i text 11104259
11104259 2003-12-14 15:46 -0500 /9 rader/ Kurt Lieber <klieber@gentoo.org>
Importerad: 2003-12-15 22:16 av Brevbäraren
Extern mottagare: bugtraq@securityfocus.com
Mottagare: Bugtraq (import) <30354>
Bilaga (application/pgp-signature) till text 11104258
Ärende: Bilaga till: GLSA: Malformed dcc send requests in xchat-2.0.6 lead to a denial of service
------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
iD8DBQE/3MwSJPpRNiftIEYRAv8VAJ9D7itnG7WRKWVHJWkHiiwQhQxKBwCfcb8U
9h78J8AOFl0PY1bWmjTU43Q=
=kUlb
-----END PGP SIGNATURE-----
(11104259) /Kurt Lieber <klieber@gentoo.org>/-------