Linux Advisory Watch - August 30th 2002

vuln-newsletter-admins@xxxxxxxxxxxxxxxxx · Fri, 30 Aug 2002 10:33:08 -0400 (EDT)

+----------------------------------------------------------------+
|  LinuxSecurity.com                        Linux Advisory Watch |
|  August 30th, 2002                        Volume 3, Number 35a |
+----------------------------------------------------------------+

  Editors:     Dave Wreski                Benjamin Thomas
               dave@linuxsecurity.com     ben@linuxsecurity.com

Linux Advisory Watch is a comprehensive newsletter that outlines the
security vulnerabilities that have been announced throughout the week.  
It includes pointers to updated packages and descriptions of each
vulnerability.

This week, advisories were released for kirssi, mailman, postgresql, gaim,
xinetd, python, ethereal, kde, and hylafax.  The vendors include
Conectiva, Debian, Gentoo, Mandrake, and Red Hat.

FREE Apache SSL Guide from Thawte Certification Do your online customers
demand the best available protection of their personal information?
Thawte's guide explains how to give this to your customers by implementing
SSL on your Apache Web Server. Click here to get our FREE Thawte Apache
Guide:

http://www.gothawte.com/rd364.html 

FEATURE: PHP Secure Installation
As we know that the vulnerabilities in PHP are increasing day by day there
comes the need to secure the PHP installation to the highest level. Due to
its popularity and its wide usage most of the developers and the
administrators will be in trouble if they don't take appropriate steps on
security issues during the installation.

http://www.linuxsecurity.com/feature_stories/feature_story-117.html

Find technical and managerial positions available worldwide.  Visit the
LinuxSecurity.com Career Center: http://careers.linuxsecurity.com

+---------------------------------+
|  Package: kirssi                | ----------------------------//
|  Date: 08-23-2002               |
+---------------------------------+

Description: 
The IRC client irssi is vulnerable to a denial of service condition.
The problem occurs when a user attempts to join a channel that has an
overly long topic description. When a certain string is appended to 

the topic, irssi will crash. 

Vendor Alerts: Intel IA-32 architecture: 
 http://security.debian.org/pool/updates/main/i/  
 irssi-text/irssi-text_0.8.4-3.1_i386.deb 
 Size/MD5 checksum:   695000 9557d0cce86def75e96636781c68716e 

 Red Hat Vendor Advisory: 
 http://www.linuxsecurity.com/advisories/debian_advisory-2306.html

+---------------------------------+
|  Package: mailman               | ----------------------------//
|  Date: 08-23-2002               |
+---------------------------------+

Description: 
Mailman versions prior to 2.0.12 contain a cross-site scripting
vulnerability in the processing of invalid requests to edit a
subscriber's list subscription options. 

 Vendor Alerts: Intel IA-32 architecture:  
 ftp://updates.redhat.com/7.3/en/os/i386/mailman-2.0.13-1.i386.rpm 
 17ff9d61c91358739215efced3c8090d 

 Red Hat Vendor Advisory: 
 http://www.linuxsecurity.com/advisories/redhat_advisory-2307.html 

 Debian:  
 http://security.debian.org/pool/updates/main/m/mailman/ 
 mailman_2.0.11-1woody4_i386.deb 
 Size/MD5 checksum:   475002 64035fc874ed300ade121957bd550e24 

 Debian Vendor Advisory: 
 http://www.linuxsecurity.com/advisories/debian_advisory-2310.html 

+---------------------------------+
|  Package: postgresql            | ----------------------------//
|  Date: 08-23-2002               |
+---------------------------------+

Description: 
Due to recent security vulnerabilities reported on BugTraq, concerning
several buffer overruns found in PostgreSQL, the PostgreSQL Global
Development Team today released v7.2.2 of PostgreSQL that fixes these
vulnerabilities.

 Vendor Alerts: Gentoo: 

 PLEASE SEE VENDOR ADVISORY FOR UPDATE 

 Gentoo Vendor Advisory: 
 http://www.linuxsecurity.com/advisories/other_advisory-2309.html

+---------------------------------+
|  Package: gaim                  | ----------------------------//
|  Date: 08-23-2002               |
+---------------------------------+

Description: 
The developers of Gaim, an instant messenger client that combines
several different networks, found a vulnerability in the hyperlink
handling code. The 'Manual' browser command passes an untrusted
string to the shell without escaping or reliable quoting, permitting
an attacker to execute arbitrary commands on the users machine.
Unfortunately, Gaim doesn't display the hyperlink before the user
clicks on it.  Users who use other inbuilt browser commands aren't
vulnerable.

 Vendor Alerts: Debian: Intel IA-32 architecture: 
 http://security.debian.org/pool/updates/main/g/gaim/ 
 gaim_0.58-2.2_i386.deb 
 Size/MD5 checksum:   
 389256 bb1688d11f1e444e7116e3ce48d4b299 

 http://security.debian.org/pool/updates/main/g/gaim/ 
 gaim-common_0.58-2.2_i386.deb 
 Size/MD5 checksum:   
 606056 ff6443a2cc3be13f8d97f8c56f93bf05 

 http://security.debian.org/pool/updates/main/g/gaim/ 
 gaim-gnome_0.58-2.2_i386.deb 
 Size/MD5 checksum:   
 409108 028dc6cfa04b921f94500853d65f1069 

 Debian Vendor Advisory: 
 http://www.linuxsecurity.com/advisories/debian_advisory-2311.html 

 Gentoo Vendor Advisory: 
 http://www.linuxsecurity.com/advisories/other_advisory-2313.html 

 Mandrake: 
 PLEASE SEE VENDOR ADVISORY FOR UPDATE 

 Mandrake Vendor Advisory: 
 http://www.linuxsecurity.com/advisories/mandrake_advisory-2319.html

+---------------------------------+
|  Package: xinetd                | ----------------------------//
|  Date: 08-23-2002               |
+---------------------------------+

Description: 
A vulnerability was discovered by Solar Designer in xinetd.  File
descriptors for the signal pipe that were introduced in version 2.3.4
are leaked into services started by xinetd, which can then be used to
talk to xinetd, resulting in a crash of xinetd. 

 Vendor Alerts: Mandrake 8.2:  
 8.2/RPMS/xinetd-2.3.7-1.1mdk.i586.rpm 
 1ae58d1e98290a5ddee12d5befc1ca81  

 8.2/RPMS/xinetd-ipv6-2.3.7-1.1mdk.i586.rpm 
 b8b28576800b4c42196dabd9c1fd27be  
 http://www.mandrakesecure.net/en/ftp.php 

 Mandrake Vendor Advisory: 
 http://www.linuxsecurity.com/advisories/mandrake_advisory-2312.html 

+---------------------------------+
|  Package: python                | ----------------------------//
|  Date: 08-23-2002               |
+---------------------------------+

Description: 
Zack Weinberg discovered an insecure use of a temporary file in
os._execvpe from os.py.  It uses a predictable name which could lead
execution of arbitrary code. 

 Vendor Alerts: Debian: Intel IA-32 architecture 
 http://security.debian.org/pool/updates/main/p/python/ 
 python-base_1.5.2-10potato12_i386.deb 
 Size/MD5 checksum:   825052 a2b34f89248287e5f61e1a9ae051b6ae 

 Debian Vendor Advisory:  
 http://www.linuxsecurity.com/advisories/debian_advisory-2314.html

+---------------------------------+
|  Package: ethereal              | ----------------------------//
|  Date: 08-28-2002               |
+---------------------------------+

Description: 
A buffer overflow in Ethereal 0.9.5 and earlier allows remote
attackers to cause a denial of service or execute arbitrary code via
the ISIS dissector 

 Vendor Alerts: Red Hat 

 ftp://updates.redhat.com/7.3/en/os/i386/
 ethereal-0.9.6-0.73.0.i386.rpm  
 44877a1c0ca46f36fbb647b17c5b9a3d  

 ftp://updates.redhat.com/7.3/en/os/i386/
 ethereal-gnome-0.9.6-0.73.0.i386.rpm 
 60e42f09e3c59ba841397f0fd655eda7  

 Red Hat Vendor Advisory: 
 http://www.linuxsecurity.com/advisories/redhat_advisory-2316.html

+---------------------------------+
|  Package: kde                   | ----------------------------//
|  Date: 08-29-2002               |
+---------------------------------+

Description: 
This is a full update of the KDE desktop to the 3.0.3 version, the 
latest release by the project[1]. Besides containing several bugfixes
and enhancements, this update also fixes two security
vulnerabilities. 

 Vendor Alerts: Conectiva 
 PLEASE SEE VENDOR ADVISORY FOR UPDATE 

 Conectiva Vendor Advisory:  
 http://www.linuxsecurity.com/advisories/other_advisory-2317.html

+---------------------------------+
|  Package: hylafax               | ----------------------------//
|  Date: 08-29-2002               |
+---------------------------------+

Description: 
This is a full update of the KDE desktop to the 3.0.3 version, the
latest release by the project[1]. Besides containing several bugfixes
and enhancements, this update also fixes two security
vulnerabilities. 

 Vendor Alerts: Mandrake 
 PLEASE SEE VENDOR ADVISORY FOR UPDATE 

 Mandrake Vendor Advisory: 
 http://www.linuxsecurity.com/advisories/mandrake_advisory-2318.html

------------------------------------------------------------------------
Distributed by: Guardian Digital, Inc.                LinuxSecurity.com

     To unsubscribe email vuln-newsletter-request@linuxsecurity.com
         with "unsubscribe" in the subject of the message.
------------------------------------------------------------------------