Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2006.0012 -- [Win][UNIX/Linux][Debian]
New smstools packages fix format string vulnerability
11 January 2006
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: SMS Server Tools (smstools)
Publisher: Debian
Operating System: Debian GNU/Linux 3.1
UNIX variants (UNIX, Linux, OSX)
Windows
Impact: Root Compromise
Access: Existing Account
CVE Names: CVE-2006-0083
Comment: Debian packages for 3.0 (woody) are now also available. See below
for details.
Revision History: January 11 2006: Debian announces woody is also affected
January 10 2006: Initial Release
- --------------------------BEGIN INCLUDED TEXT--------------------
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- - --------------------------------------------------------------------------
Debian Security Advisory DSA 930-2 security@debian.org
http://www.debian.org/security/ Steve Kemp
January 10, 2006 http://www.debian.org/security/faq
- - --------------------------------------------------------------------------
Package : smstools
Vulnerability : format string attack
Problem-Type : local
Debian-specific: no
CVE ID : CVE-2006-0083
Ulf Harnhammar from the Debian Security Audit project discovered a
format string attack in the logging code of smstools, which may be
exploited to execute arbitary code with root privileges.
The original advisory for this issue said that the old stable
distribution (woody) was not affected because it did not contain
smstools. This was incorrect, and the only change in this updated
advisory is the inclusion of corrected packages for woody.
For the old stable distribution (woody) this problem has been fixed in
version 1.5.0-2woody0.
For the stable distribution (sarge) this problem has been fixed in
version 1.14.8-1sarge0.
For the unstable distribution the package will be updated shortly.
We recommend that you upgrade your smstools package.
Upgrade Instructions
- - --------------------
wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.
If you are using the apt-get package manager, use the line for
sources.list as given below:
apt-get update
will update the internal database
apt-get upgrade
will install corrected packages
You may use an automated update by adding the resources from the
footer to the proper configuration.
Debian GNU/Linux 3.0 alias woody
- - --------------------------------
Source archives:
http://security.debian.org/pool/updates/main/s/smstools/smstools_1.5.0-2woody0.dsc
Size/MD5 checksum: 595 3b125f8d494769561c579a2afb8eedf3
http://security.debian.org/pool/updates/main/s/smstools/smstools_1.5.0-2woody0.diff.gz
Size/MD5 checksum: 7441 8fd87155404a99eb88ff06e5e7bccd4b
http://security.debian.org/pool/updates/main/s/smstools/smstools_1.5.0.orig.tar.gz
Size/MD5 checksum: 42987 0286109d2011a5b8ab2fbd2cda6085be
Alpha architecture:
http://security.debian.org/pool/updates/main/s/smstools/smstools_1.5.0-2woody0_alpha.deb
Size/MD5 checksum: 56840 8d84dd61b7002fbb5f5ff1411345cdf6
ARM architecture:
http://security.debian.org/pool/updates/main/s/smstools/smstools_1.5.0-2woody0_arm.deb
Size/MD5 checksum: 44604 af22b10857060a0fe0f1db651ea54689
Intel IA-32 architecture:
http://security.debian.org/pool/updates/main/s/smstools/smstools_1.5.0-2woody0_i386.deb
Size/MD5 checksum: 43106 af2b3c3a8a18d71481fbadeef60846f8
Intel IA-64 architecture:
http://security.debian.org/pool/updates/main/s/smstools/smstools_1.5.0-2woody0_ia64.deb
Size/MD5 checksum: 74424 96904451a1a06e22d4fcee797dc68450
HP Precision architecture:
http://security.debian.org/pool/updates/main/s/smstools/smstools_1.5.0-2woody0_hppa.deb
Size/MD5 checksum: 44432 70d55071bbdf08f2d3265da85cb43458
Motorola 680x0 architecture:
http://security.debian.org/pool/updates/main/s/smstools/smstools_1.5.0-2woody0_m68k.deb
Size/MD5 checksum: 41598 d25cce8dcfed54f7f9b62e7764775907
Big endian MIPS architecture:
http://security.debian.org/pool/updates/main/s/smstools/smstools_1.5.0-2woody0_mips.deb
Size/MD5 checksum: 52646 2edd9efcca5f608c09d6903335d7dc14
Little endian MIPS architecture:
http://security.debian.org/pool/updates/main/s/smstools/smstools_1.5.0-2woody0_mipsel.deb
Size/MD5 checksum: 52290 5f019a902c94b8d4c0a6b9781afa2664
PowerPC architecture:
http://security.debian.org/pool/updates/main/s/smstools/smstools_1.5.0-2woody0_powerpc.deb
Size/MD5 checksum: 43316 df4f00d5ccc813274a3936455ff39b70
IBM S/390 architecture:
http://security.debian.org/pool/updates/main/s/smstools/smstools_1.5.0-2woody0_s390.deb
Size/MD5 checksum: 43812 9e6f27fb09a8e1152db4238eb851b659
Sun Sparc architecture:
http://security.debian.org/pool/updates/main/s/smstools/smstools_1.5.0-2woody0_sparc.deb
Size/MD5 checksum: 51388 d98ca0bc6bbeecb8d19e630528c6fd9f
- - ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
iQCVAwUBQ8O64A0hVr09l8FJAQJktAP+Lz1FQMEN7DDexdkjHCmr4i7ppBNBc37v
OIaWqECUgdo6HaKuwVxqI3MQ/w0knMydjM3h4/KygnAQUlesol5Egd9WhiVxO7BH
nmaVedl8tiQM6mtCmTKlVw9dlEtykGUdYYC3qXtPV3suzuqsDLtPlTfKmQWqevy6
V0TLiivO8m4=
=HaD3
- -----END PGP SIGNATURE-----
- --------------------------END INCLUDED TEXT--------------------
You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
http://www.auscert.org.au/render.html?cid=1980
If you believe that your computer system has been compromised or attacked in
any way, we encourage you to let us know by completing the secure National IT
Incident Reporting Form at:
http://www.auscert.org.au/render.html?it=3192
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967
iQCVAwUBQ8SnIyh9+71yA2DNAQK1JQP/Q5Jh7FQMXLgux7u+UA3Rojmds9xElVO4
VYdI4P/qxwZ4kaWD7n/ExkqG8dr1vegnnQBoPlws7AiAGEbEBCKKimMu4LlfXN3f
UKPDOTCn72iHbXkuePCkDNY8H/0NqDs9bfuEp5BpdC+ukGEwn1p8v7/4c4S7HQdA
OB+Qwo9/Y8g=
=a10T
-----END PGP SIGNATURE-----