August 2005
Gentoo - Three Security Advisories
ID: 00706
Ref: 653/05
Date: 19 August 2005:16:32:36
Version: 1
Title: Gentoo - Three Security Advisories
Abstract: 1. bluez-utils: Bluetooth device name validation vulnerability [GLSA 200508-09], 2. Kismet: Multiple vulnerabilities [GLSA 200508-10], 3. Adobe Reader: Buffer Overflow [GLSA 200508-11]
Vendors affected: Gentoo
Operating systems affected: Gentoo
Applications affected: Gentoo
Title
=====
Gentoo - Three Security Advisories:
1. bluez-utils: Bluetooth device name validation vulnerability [GLSA 200508-09]
2. Kismet: Multiple vulnerabilities [GLSA 200508-10]
3. Adobe Reader: Buffer Overflow [GLSA 200508-11]
Detail
======
Security advisory summaries:
1. Improper validation of Bluetooth device names can lead to arbitrary
command execution.
2. Kismet is vulnerable to multiple issues potentially resulting in the
execution of arbitrary code.
3. Adobe Reader is vulnerable to a buffer overflow which could potentially
lead to execution of arbitrary code.
Security advisory content follows:
1.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200508-09
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Severity: High
Title: bluez-utils: Bluetooth device name validation vulnerability
Date: August 17, 2005
Bugs: #101557
ID: 200508-09
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Synopsis
========
Improper validation of Bluetooth device names can lead to arbitrary
command execution.
Background
==========
bluez-utils are the utilities for use with the BlueZ implementation of
the Bluetooth wireless standards for Linux.
Affected packages
=================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 net-wireless/bluez-utils < 2.19 >= 2.19
Description
===========
The name of a Bluetooth device is improperly validated by the hcid
utility when a remote device attempts to pair itself with a computer.
Impact
======
An attacker could create a malicious device name on a Bluetooth device
resulting in arbitrary commands being executed as root upon attempting
to pair the device with the computer.
Workaround
==========
There are no known workarounds at this time.
Resolution
==========
All bluez-utils users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-wireless/bluez-utils-2.19"
References
==========
[ 1 ] CAN-2005-2547
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2547
[ 2 ] bluez-utils ChangeLog
http://cvs.sourceforge.net/viewcvs.py/bluez/utils/ChangeLog?rev=1.28&view=markup
Availability
============
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:
http://security.gentoo.org/glsa/glsa-200508-09.xml
Concerns?
=========
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
http://bugs.gentoo.org.
License
=======
Copyright 2005 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).
The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.0
2.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200508-10
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Severity: High
Title: Kismet: Multiple vulnerabilities
Date: August 19, 2005
Bugs: #102702
ID: 200508-10
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Synopsis
========
Kismet is vulnerable to multiple issues potentially resulting in the
execution of arbitrary code.
Background
==========
Kismet is an 802.11 Layer 2 wireless network detector, sniffer, and
intrusion detection system.
Affected packages
=================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 net-wireless/kismet < 2005.08.1 >= 2005.08.1
Description
===========
Kismet is vulnerable to a heap overflow when handling pcap captures and
to an integer underflow in the CDP protocol dissector.
Impact
======
With a specially crafted packet an attacker could cause Kismet to
execute arbitrary code with the rights of the user running the program.
Workaround
==========
There is no known workaround at this time.
Resolution
==========
All Kismet users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-wireless/kismet-2005.08.1"
References
==========
[ 1 ] Kismet Release Notes
http://www.kismetwireless.net/blog/?entry=/kismet/entry-1124158146.txt
Availability
============
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:
http://security.gentoo.org/glsa/glsa-200508-10.xml
Concerns?
=========
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
http://bugs.gentoo.org.
License
=======
Copyright 2005 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).
The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.0
3.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200508-11
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Severity: Normal
Title: Adobe Reader: Buffer Overflow
Date: August 19, 2005
Bugs: #102730
ID: 200508-11
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Synopsis
========
Adobe Reader is vulnerable to a buffer overflow which could potentially
lead to execution of arbitrary code.
Background
==========
Adobe Reader is a utility used to view PDF files.
Affected packages
=================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 app-text/acroread < 7.0.1.1 >= 7.0.1.1
Description
===========
A buffer overflow has been reported within a core application plug-in,
which is part of Adobe Reader.
Impact
======
An attacker may create a specially-crafted PDF file, enticing a user to
open it. This could trigger a buffer overflow as the file is being
loaded, resulting in the execution of arbitrary code.
Workaround
==========
There is no known workaround at this time.
Resolution
==========
All Adobe Reader users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=app-text/acroread-7.0.1.1"
References
==========
[ 1 ] CAN-2005-2470
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2470
[ 2 ] Adobe Document 321644
http://www.adobe.com/support/techdocs/321644.html
Availability
============
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:
http://security.gentoo.org/glsa/glsa-200508-11.xml
Concerns?
=========
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
http://bugs.gentoo.org.
License
=======
Copyright 2005 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).
The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.0