March 2005
Four Gentoo Linux Security Advisories
ID: 00229
Ref: 208/2005
Date: 21 March 2005:15:26:06
Version: 1
Title: Four Gentoo Linux Security Advisories
Abstract:
Vendors affected: Gentoo
Operating systems affected: Gentoo
Applications affected: Gentoo
Title
=====
Four Gentoo Linux Security Advisories:
1. GLSA 200503-22 - KDE: Local Denial of Service
2. GLSA 200503-23 - rxvt-unicode: Buffer overflow
3. GLSA 200503-25 - OpenSLP: Multiple buffer overflows
4. GLSA 200503-26 - Sylpheed, Sylpheed-claws: Message reply overflow
Detail
======
1. Sebastian Krahmer discovered that it is possible to stall the
dcopserver of other users.
2. Rob Holland of the Gentoo Linux Security Audit Team discovered that
rxvt-unicode fails to properly check input length.
3. Multiple buffer overflows have been found in OpenSLP, when handling
malformed SLP packets.
4. Sylpheed and Sylpheed-claws fail to properly handle non-ASCII
characters in email headers when composing reply messages.
1.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200503-22
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Severity: Normal
Title: KDE: Local Denial of Service
Date: March 19, 2005
Bugs: #83814
ID: 200503-22
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Synopsis
========
KDE is vulnerable to a local Denial of Service attack.
Background
==========
KDE is a feature-rich graphical desktop environment for Linux and
Unix-like Operating Systems. DCOP is KDE's simple IPC/RPC mechanism.
Affected packages
=================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 kde-base/kdelibs < 3.3.2-r7 >= 3.3.2-r7
*>= 3.2.3-r8
Description
===========
Sebastian Krahmer discovered that it is possible to stall the
dcopserver of other users.
Impact
======
An attacker could exploit this to cause a local Denial of Service by
stalling the dcopserver in the authentication process. As a result all
desktop functionality relying on DCOP will cease to function.
Workaround
==========
There is no known workaround at this time.
Resolution
==========
All kdelibs users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose kde-base/kdelibs
References
==========
[ 1 ] CAN-2005-0396
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0396
Availability
============
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:
http://security.gentoo.org/glsa/glsa-200503-22.xml
Concerns?
=========
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
http://bugs.gentoo.org.
License
=======
Copyright 2005 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).
The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.0
2.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200503-23
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Severity: Normal
Title: rxvt-unicode: Buffer overflow
Date: March 20, 2005
Bugs: #84680
ID: 200503-23
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Synopsis
========
rxvt-unicode is vulnerable to a buffer overflow that could lead to the
execution of arbitrary code.
Background
==========
rxvt-unicode is a clone of the well known terminal emulator rxvt.
Affected packages
=================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 x11-terms/rxvt-unicode < 5.3 >= 5.3
< 4.8
Description
===========
Rob Holland of the Gentoo Linux Security Audit Team discovered that
rxvt-unicode fails to properly check input length.
Impact
======
Successful exploitation would allow an attacker to execute arbitrary
code with the permissions of the user running rxvt-unicode.
Workaround
==========
There is no known workaround at this time.
Resolution
==========
All rxvt-unicode users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-terms/rxvt-unicode-5.3"
References
==========
[ 1 ] CAN-2005-0764
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0764
Availability
============
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:
http://security.gentoo.org/glsa/glsa-200503-23.xml
Concerns?
=========
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
http://bugs.gentoo.org.
License
=======
Copyright 2005 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).
The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.0
3.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200503-25
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Severity: High
Title: OpenSLP: Multiple buffer overflows
Date: March 20, 2005
Bugs: #85347
ID: 200503-25
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Synopsis
========
Multiple buffer overflows have been found in OpenSLP, which could lead
to the remote execution of arbitrary code.
Background
==========
OpenSLP is an open-source implementation of Service Location Protocol
(SLP).
Affected packages
=================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 net-libs/openslp < 1.2.1 >= 1.2.1
Description
===========
Multiple buffer overflows have been found in OpenSLP, when handling
malformed SLP packets.
Impact
======
By sending specially crafted SLP packets, a remote attacker could
potentially execute arbitrary code with the rights of the OpenSLP
daemon.
Workaround
==========
There is no known workaround at this time.
Resolution
==========
All OpenSLP users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-libs/openslp-1.2.1"
References
==========
[ 1 ] SUSE Security Announcement
http://www.novell.com/linux/security/advisories/2005_15_openslp.html
Availability
============
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:
http://security.gentoo.org/glsa/glsa-200503-25.xml
Concerns?
=========
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
http://bugs.gentoo.org.
License
=======
Copyright 2005 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).
The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.0
4.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200503-26
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Severity: Normal
Title: Sylpheed, Sylpheed-claws: Message reply overflow
Date: March 20, 2005
Bugs: #84056
ID: 200503-26
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Synopsis
========
Sylpheed and Sylpheed-claws contain a vulnerability that can be
triggered when replying to specially crafted messages.
Background
==========
Sylpheed is a lightweight email client and newsreader. Sylpheed-claws
is a 'bleeding edge' version of Sylpheed.
Affected packages
=================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 mail-client/sylpheed < 1.0.3 >= 1.0.3
2 mail-client/sylpheed-claws < 1.0.3 >= 1.0.3
-------------------------------------------------------------------
2 affected packages on all of their supported architectures.
-------------------------------------------------------------------
Description
===========
Sylpheed and Sylpheed-claws fail to properly handle non-ASCII
characters in email headers when composing reply messages.
Impact
======
An attacker can send an email containing a malicious non-ASCII header
which, when replied to, would cause the program to crash, potentially
allowing the execution of arbitrary code with the privileges of the
user running the software.
Workaround
==========
There is no known workaround at this time.
Resolution
==========
All Sylpheed users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=mail-client/sylpheed-1.0.3"
All Sylpheed-claws users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=mail-client/sylpheed-claws-1.0.3"
References
==========
[ 1 ] Sylpheed ChangeLog
http://sylpheed.good-day.net/#changes
[ 2 ] CAN-2005-0667
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0667
Availability
============
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:
http://security.gentoo.org/glsa/glsa-200503-26.xml
Concerns?
=========
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
http://bugs.gentoo.org.
License
=======
Copyright 2005 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).
The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.0