July 2007

ID: 146
Ref: 91/2007
Date: 02 July 2007:12:09:20
Version: 1

---

Title: Several Debian Security Advisories
Abstract: Descriptions of a number of Debian vulnerabilities and patches.
Vendors affected: Debian

---

Package : wireshark
Vulnerability : several
Problem-Type : remote
Debian-specific: no
CVE ID : CVE-2007-3390 CVE-2007-3392 CVE-2007-3393

Several remote vulnerabilities have been discovered in the Wireshark
network traffic analyzer, which may lead to denial of service.


Package : krb5
Vulnerability : several
Problem-Type : remote
Debian-specific: no
CVE ID : CVE-2007-2442 CVE-2007-2443 CVE-2007-2798

Several remote vulnerabilities have been discovered in the MIT reference
implementation of the Kerberos network authentication protocol suite,
which may lead to the execution of arbitrary code.


Package : hiki
Vulnerability : missing input sanitising
Problem type : remote
Debian-specific: no
CVE Id(s) : CVE-2007-2836
Debian Bug : 430691

Kazuhiro Nishiyama found a vulnerability in hiki, a Wiki engine written
in Ruby, which could allow a remote attacker to delete arbitary files
which are writable to the Hiki user, via a specially crafted session
parameter.


Package : evolution
Vulnerability : several
Problem-Type : remote
Debian-specific: no
CVE ID : CVE-2007-1002 CVE-2007-3257

Several remote vulnerabilities have been discovered in Evolution, a
groupware suite with mail client and organizer.


Package : fireflier-server
Vulnerability : insecure temporary files
Problem type : local
Debian-specific: no
CVE Id(s) : CVE-2007-2837

Steve Kemp from the Debian Security Audit project discovered that
fireflier-server, an interactive firewall rule creation tool, uses
temporary files in an unsafe manner which may be exploited to remove
arbitary files from the local system.


Package : gsambad
Vulnerability : insecurity temporary files
Problem type : local
Debian-specific: no
CVE Id(s) : CVE-2007-2838

Steve Kemp from the Debian Security Audit project discovered
that gsambad, a GTK+ configuration tool for samba, uses temporary
files in an unsafe manner which may be exploited to truncate arbitary
files from the local system.


Package : unicon-imc2
Vulnerability : buffer overflow
Problem type : local
Debian-specific: no
CVE Id(s) : CVE-2007-2835

Steve Kemp from the Debian Security Audit project discovered that
unicon-imc2, a Chinese input method library, makes unsafe use of an
environmental variable, which may be exploited to execute arbitary code.


Further information can be found at:
http://www.debian.org/security/#DSAS

______________________________________________________________________________

CPNI values your feedback.

1. Which of the following most reflects the value of the advisory to you?
(Place an 'X' next to your choice)

Very useful:__ Useful:__ Not useful:__

2. If you did not find it useful, why not?


3. Any other comments? How could we improve our advisories?


Thank you for your contribution.
______________________________________________________________________________

CPNI wishes to acknowledge the contributions of Debian for the information contained in this advisory.
______________________________________________________________________________

This advisory contains information released by the original author. Some
of the information may have changed since it was released. If the issue affects you, it may be prudent to retrieve the advisory from the site of the original source to ensure that you receive the most current information
concerning that problem.

Reference to any specific commercial product, process, or service by
trade name, trademark manufacturer, or otherwise, does not constitute or imply
its endorsement, recommendation, or favouring by CPNI. The views and
opinions of authors expressed within this notice shall not be used for advertising or product endorsement purposes.

CPNI shall not accept responsibility for any errors or omissions contained within this advisory. In particular, they shall not be liable for any loss or damage whatsoever, arising from or in connection with the usage of information contained within this advisory.

CPNI is a member of the Forum of Incident Response and Security Teams
(FIRST) and has contacts with other international Incident Response Teams (IRTs) in order to foster cooperation and coordination in incident prevention, to prompt rapid reaction to incidents, and to promote information sharing amongst its members and the community at large.
______________________________________________________________________________

<End of CPNI Advisory>